CVE-2026-25537 - Vulnerability Details

Threat entity extracted from intelligence sources

Frequency
8
occurrences
First Seen
February 10, 2026
Last Seen
June 12, 2026

CVE-2026-25537 is a vulnerability tracked by ThreatCluster, appearing in 3 threat clusters built from 8 intelligence report mentions.

CVE-2026-25537 is a vulnerability tracked across 3 threat clusters and 8 intelligence report mentions on ThreatCluster. First observed February 10, 2026; most recent activity June 12, 2026.

Related Threat Clusters

  • Critical Security Flaws in Vaultwarden Affecting Fedora 43 and 44

    Multiple critical vulnerabilities have been identified in Vaultwarden, impacting Fedora 43 and 44. Key issues include CVE-2026-27801, allowing two-factor authentication bypass, and CVE-2026-27803, which enables…

    4 articles · Updated June 12, 2026
  • Critical JSON Web Token Vulnerability in Fedora 42 Identified

    A critical vulnerability has been identified in Fedora 42 related to JSON Web Tokens. This issue affects users relying on the package manager and project management tools integrated within the Fedora ecosystem. The…

    2 articles · Updated February 11, 2026
  • Multiple CVEs Affect Fedora 43 with Security Updates

    Fedora 43 has released updates addressing multiple security vulnerabilities, including CVE-2026-25537 and others related to various crates. Affected components include the time, git2, and bytes crates, with updates…

    9 articles · Updated February 10, 2026

Recent Intelligence Reports

  • Fedora 43 vaultwarden Critical DoS and Access Issues Fix 2026 — Linuxsecurity · June 12, 2026
  • Fedora 44 Vaultwarden Critical Security Fix from 2026 — Linuxsecurity · June 12, 2026
  • Fedora 42 uv Critical JSON Web Token Issue Advisory CVE-2026 — Linuxsecurity · February 11, 2026
  • Fedora 43 Sad 2026-F400579A21 CVE-2026 — Linuxsecurity · February 10, 2026
  • Fedora 43 tbtools CVE-2026 — Linuxsecurity · February 10, 2026
  • Fedora 43 tuigreet Critical Stack Exhaustion Issue CVE-2026 — Linuxsecurity · February 10, 2026
  • Fedora 43 Rust-Wiremix CVE-2026 — Linuxsecurity · February 10, 2026
  • Important DoS Threat Notice for Fedora 43 Advisory FEDORA-2026 — Linuxsecurity · February 10, 2026

Related Entities

Data Breach DDoS Denial of Service Fedora CVE-2025-58160 CVE-2026-25727 CVE-2026-26012 CVE-2026-27801 CVE-2026-27803 CVE-2026-27898 CWE-200 - Exposure of Sensitive Information CWE-287 - Improper Authentication

Frequently asked questions

What is CVE-2026-25537?

CVE-2026-25537 is a vulnerability tracked by ThreatCluster, appearing in 3 threat clusters built from 8 intelligence report mentions.

Is CVE-2026-25537 still active?

The most recent intelligence report mentioning CVE-2026-25537 on ThreatCluster is dated June 12, 2026. Activity was first observed February 10, 2026, giving a tracked span from then to June 12, 2026.

What is CVE-2026-25537 associated with?

Across ThreatCluster reporting, CVE-2026-25537 most frequently co-occurs with Data Breach, DDoS, Denial of Service, Fedora, CVE-2025-58160, among 12 tracked related entities.

What are the latest developments involving CVE-2026-25537?

The most significant recent cluster is “Critical Security Flaws in Vaultwarden Affecting Fedora 43 and 44” (4 articles · Updated June 12, 2026). CVE-2026-25537 appears across 3 threat clusters in total, listed above with sources.

How much reporting does ThreatCluster have on CVE-2026-25537?

CVE-2026-25537 appears in 8 intelligence report mentions across 3 deduplicated threat clusters, aggregated from 17,000+ monitored sources.

CVSS v3.1 Breakdown