CVE-2025-39443

Summary

CVE-2025-39443 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Soft8Soft LLC's Verge3D software. This issue enables attackers to submit malicious requests on behalf of an unsuspecting user. The flaw affects Verge3D versions from n/a through 4.9.0, potentially exposing users to unauthorized actions and data manipulation. Successful exploitation of this vulnerability could lead to security breaches and unintended modifications to users' data or settings. To mitigate the risk, users are encouraged to update to the latest version of Verge3D as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.