VulnSocial

CVE-2025-13905Disclosure

LOWCVSS 7.0 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

CWE-276: Incorrect Default Permissions vulnerability exists that could cause privilege escalation through the reverse shell when one or more executable service binaries are modified in the installation folder by a local user with normal privilege upon service restart.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-276

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-01-29: 2Technical Details · 2026-01-29: 201-29
Signal classification1 categories
Disclosure
2100.0%
Referenced assets3 URLs
Full discourse2 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2025-13905 Privilege Escalation in Service Binaries via Incorrect Default Permissio... https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-13905 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3

    Post summary

    The post announces CVE‑2025‑13905, a privilege escalation bug caused by incorrect default permissions in service binaries, and directs readers to external links for more details. No exploit information, patch details, or evidence of active use is provided.

    0000048
    4.0K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2025-13905 CWE-276: Incorrect Default Permissions vulnerability exists that could cause privilege escalation through the reverse shell when one or more executable service bina… https://www.cve.org/CVERecord?id=CVE-2025-13905

    Post summary

    The CVE refers to an Incorrect Default Permissions flaw that could allow privilege escalation through a reverse shell, but no PoC, exploit code, or patch information is provided in the text.

    00000153
    56.5K followersView on X

Explore more

Back to dashboard