Archive

5 December 2025

Vulnerabilities first published on this day (UTC), newest first.

← November 2025 2025 / December /5 January 2026 →

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.3

CVE-2025-58098 Public exploit

Apache HTTP Server: Server Side Includes adds query string to #exec cmd=...

Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes the shell-escaped query string to #exec cmd="..." directives. This issue affects Apache HTTP Server before 2.4.66. Users are recommended to upg…

Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine

Dec 5, 2025