CVE-2025-6544
Deserialization of untrusted data in H2o
CVSS score
9.8
EPSS probability
%0.9
Risk score
0.1
Published
1 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
G
zero-day348/CVE-2025-65442-DOM-based-Cross-Site-Scripting-XSS-Vulnerability-in-novel-V3.5.0-CWE-79- DOM-based Cross-Site Scripting (XSS) Vulnerability in novel V3.5.0 (CWE-79)
Makefile Go / Python
https://huntr.com/bounties/53f35a0f-d644-4f82-93aa-89fe7e0aed40
Makefile Go / Python
Similar Vulnerabilities
9.8
CVE-2026-8751
Improper input validation in H2o
H
Patch status unknownEPSS %1
7.5
CVE-2026-8750
Information exposure in H2o
H
Patch status unknownEPSS %1
9.8
CVE-2025-10768
Improper input validation in H2o
H
Patch status unknownEPSS %0
7.5
CVE-2026-54340
Uncontrolled resource consumption in H2o
H
Patch verifiedEPSS %0
7.5
CVE-2026-44436
Buffer overflow in H2o Quicly
H
Patch verifiedEPSS %0
7.5
CVE-2026-44453
Resource allocation without limits in H2o
H
Patch verifiedEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-6544"