CVE Intelligence

Passy vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Passy products: 1 record(s), with severity, exploitation and fixes.

Passy 1

Exploited only (KEV) →

CVE-2025-67397 Critical · 9.1 CWE-77 Jan 5, 2026
Command Injection in Passy
An issue in Passy v.1.6.3 allows a remote authenticated attacker to execute arbitrary commands via a crafted HTTP request using a specific payload injection.