Get real-time updates on Telegram
CVE-2025-13792: Qualitor 8.20.104, 8.24.0, 8.24.1, 8.24.2, 8.24.3, 8.24.4, 8.24.5, 8.24.6, 8.24.7, 8.24.8, 8.24.9, 8.24.10, 8.24.11…
CVE-2025-13792. CVSS 3.1 base score 7.3 (HIGH, Vendor/CNA). EPSS 0.0046 (percentile 0.3849), scored 17-Oct-2026.
Affected technology
Qualitor · 8.20.104, 8.24.0, 8.24.1, 8.24.2, 8.24.3, 8.24.4, 8.24.5, 8.24.6, 8.24.7, 8.24.8, 8.24.9, 8.24.10, 8.24.11, 8.24.12, 8.24.13, 8.24.14, 8.24.15, 8.24.16, 8.24.17, 8.24.18, 8.24.19, 8.24.20, 8.24.21, 8.24.22, 8.24.23, 8.24.24, 8.24.25, 8.24.26, 8.24.27, 8.24.28, 8.24.29, 8.24.30, 8.24.31, 8.24.32, 8.24.33, 8.24.34, 8.24.35, 8.24.36, 8.24.37, 8.24.38, 8.24.39, 8.24.40, 8.24.41, 8.24.42, 8.24.43, 8.24.44, 8.24.45, 8.24.46, 8.24.47, 8.24.48, 8.24.49, 8.24.50, 8.24.51, 8.24.52, 8.24.53, 8.24.54, 8.24.55, 8.24.56, 8.24.57, 8.24.58, 8.24.59, 8.24.60, 8.24.61, 8.24.62, 8.24.63, 8.24.64, 8.24.65, 8.24.66, 8.24.67, 8.24.68, 8.24.69, 8.24.70, 8.24.71, 8.24.72, 8.24.73, 8.24.74, 8.24.75, 8.24.76, 8.24.77, 8.24.78, 8.24.79, 8.24.80, 8.24.81, 8.24.82, 8.24.83, 8.24.84, 8.24.85, 8.24.86, 8.24.87, 8.24.88, 8.24.89, 8.24.90, 8.24.91, 8.24.92, 8.24.93, 8.24.94, 8.24.95, 8.24.96, 8.24.97
Vendor not specified by the source
Description’s affected range: up to 8.20.104/8.24.97
Component: Not specified by the source
Function: eval
File: /html/st/stdeslocamento/request/getResumo.php
Attack conditions (VulDB, CVSS 4.0): Network (remote) · No privileges required · No user interaction required
What an attacker can do
VulDB’s CVSS 4.0 assessment (base score 5.5/10) rates confidentiality, integrity and availability impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-74, CWE-94
- CCR priority
- 29.3 /100 (P4)
- CVSS 3.1
- 7.3 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L · Vendor/CNA
- EPSS
- 0.0046 · percentile 0.3849 · 2026-10-17
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-18 18:49:36.049749+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-13792.html