Skip to main content

Untrusted Search Path

CVE-2025-65078

High
9.3/10

Summary

An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code.

  • LOW
  • NETWORK
  • NONE
  • NONE

CWE-426 - Untrusted Search Path

The application searches for critical resources using an externally-supplied search path that can point to resources that are not under the application's direct control.

References

Advisory Timeline

  • Published