CVE-2025-65078

An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code.

CVSS

No CVSS.

References

Link	Resource
https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html

Configurations

No configuration.

History

03 Feb 2026, 21:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-02-03 21:16

Updated : 2026-02-03 21:16

NVD link : CVE-2025-65078

Mitre link : CVE-2025-65078

CVE.ORG link : CVE-2025-65078

JSON object : View

Products Affected

No product.

CWE

CWE-426

Untrusted Search Path

{"id": "CVE-2025-65078", "cveTags": [], "metrics": {"cvssMetricV40": [{"type": "Secondary", "source": "7bc73191-a2b6-4c63-9918-753964601853", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "published": "2026-02-03T21:16:11.280", "references": [{"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html", "source": "7bc73191-a2b6-4c63-9918-753964601853"}], "vulnStatus": "Received", "weaknesses": [{"type": "Secondary", "source": "7bc73191-a2b6-4c63-9918-753964601853", "description": [{"lang": "en", "value": "CWE-426"}]}], "descriptions": [{"lang": "en", "value": "An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code."}], "lastModified": "2026-02-03T21:16:11.280", "sourceIdentifier": "7bc73191-a2b6-4c63-9918-753964601853"}

CVE-2025-65078

JSON object

Attach tags to CVE-2025-65078

Attach tags to `CVE-2025-65078`