coldbraid

CVE-2025-27920 Srimax Output Messenger

Srimax Output Messenger contains a directory traversal vulnerability that allows an attacker to access sensitive files outside the intended directory, potentially leading to configuration leakage or arbitrary file access.

CVSS
not scored

CWE-22

On CISA’s exploited list

Srimax Output Messenger Directory Traversal Vulnerability

Added
2025-05-19
Federal patch deadline
2025-06-09
Ransomware use
not known