CVE Intelligence
Analysis AI-assisted

CVE-2018-25272: ELBA5 5.8.0 Remote Code Execution via Database Access

ELBA5 version 5.8.0 is affected by a critical remote code execution issue (CVE-2018-25272) that, according to the record, can be reached through default database connector credentials. The description states that this may expose database credentials and allow commands with SYSTEM-level permissions. The record lists no fixed version, and CISA KEV does not list this CVE.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

CVE-2018-25272 concerns ELBA5 version 5.8.0, which the record describes as containing a remote code execution vulnerability. According to the description, an attacker who can reach the database may use default connector credentials to gain access, which the description says can lead to commands running with SYSTEM-level permissions.

Impact

  • The description states that the issue can expose database administrator credentials and allow execution of arbitrary commands.
  • The CVSS 3.1 base score in the record is 9.8, rated critical.
  • VulnCheck also lists a CVSS 4.0 score of 9.3.
  • The record associates the weakness with CWE-326, Inadequate Encryption Strength.

Affected products and versions

  • The description names ELBA5 version 5.8.0.
  • The structured list of affected products in the record is empty, so the full range of affected versions is unknown.

Exploitation status

  • The record shows that this CVE is not listed in CISA KEV, so this analysis does not state active exploitation.
  • The record references an Exploit-DB entry. A reference of this kind does not by itself confirm exploitation in the wild.
  • No confirmed exploitation appears in the sources consulted.
  • The EPSS probability in the record is 0.00422, with a percentile of 0.34751.

Remediation and mitigation

  • The record lists no fixed version. A missing fixed version does not prove that no fix exists, so check the vendor site and the VulnCheck advisory for updates.
  • Contact the vendor through the ELBA website to confirm the status of patches and guidance for supported versions.
  • While verification is pending, restrict network access to ELBA5 systems and their databases to trusted hosts only.
  • Review and change default connector credentials, and apply the principle of least privilege to database and service accounts.
  • Review whether database command-execution features are necessary and disable them where they are not required.

Detection guidance

  • Review database and application logs for connections made with default or unexpected service accounts.
  • Monitor for unexpected creation of accounts or unauthorized changes to user tables.
  • Watch for unusual child processes spawned by database or application services.
  • Treat these as high-level signals and tune them to your environment.

Limitations of the available information

  • The record does not provide structured affected or fixed version data.
  • The record marks the source status as Deferred.
  • The EPSS date in the record is later than the publication date, so the EPSS value should be interpreted with care.
  • The contents of the referenced Exploit-DB entry were not reviewed for this analysis, and no further technical detail is provided here.

Frequently asked questions

Is CVE-2018-25272 listed in CISA KEV?

No. The record shows the KEV listing as false, so this analysis does not state active exploitation. No confirmed exploitation appears in the sources consulted.

Which version is affected?

The description names ELBA5 version 5.8.0. The structured affected-product list is empty, so other affected versions are unknown.

Is there a fixed version?

The record lists no fixed version. This is unknown rather than proof that no fix exists, so check the vendor and the VulnCheck advisory.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.