CVE-2025-24855

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

February 18, 2026

Last Seen

May 23, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Dell PowerFlex Security Updates Address Multiple Vulnerabilities72.5

Dell has released two security updates (DSA-2025-434 and DSA-2025-435) addressing multiple vulnerabilities in PowerFlex Rack and Appliance systems. The updates cover numerous CVEs, including critical vulnerabilities in third-party components affecting Dell PowerEdge servers, iDRAC, and VMware produc...

Multiple CVEs Identified in libxslt Affecting XPath Evaluations41.1

Two vulnerabilities have been reported in libxslt prior to version 1.1.43. CVE-2024-55549 involves a use-after vulnerability in xsltGetInheritedNsList, while CVE-2025-24855 is a use-after-free issue related to nested XPath evaluations. Both vulnerabilities were published on March 14, 2025, and could...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (2)

Dell PowerFlex Security Updates Address Multiple Vulnerabilities

May 23·2 sources

Multiple CVEs Identified in libxslt Affecting XPath Evaluations

Feb 21·2 sources

Related Entities

Zero-day Exploit CVE-2026-26945 Go OpenJDK OpenSSH Pgproto3 Pgx PostgreSQL IDRAC Redis Glibc SQLite

CVE-2025-24855

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (2)

Dell PowerFlex Security Updates Address Multiple Vulnerabilities

Multiple CVEs Identified in libxslt Affecting XPath Evaluations

Related Articles (3)

Dsa 2025 435 Security Update For Dell Powerflex Rack Multiple Third Party Component Vulnerabilities

Dsa 2025 434 Security Update For Dell Powerflex Appliance Multiple Third Party Component Vulnerabilities

CVE-2025-24855 numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.

Related Entities