CVE-2025-1186

Summary

CVE-2025-1186 is a critical vulnerability affecting dayrui XunRuiCMS versions up to 4.6.4. The issue lies in the /Control/Api/Api.php file, specifically with the handling of the 'thumb' argument. This vulnerability enables remote attackers to initiate deserialization through manipulation of this argument. The exploit for this vulnerability has been disclosed to the public, increasing the risk of potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.