PatchSiren cyber security CVE debrief
CVE-2025-60175 vynnus CVE debrief
CVE-2025-60175 is a medium-severity vulnerability affecting PopAd versions up to 1.0.4. This issue is classified as an Administrator Server Side Request Forgery (SSRF) vulnerability.
- Vendor
- vynnus
- Product
- PopAd
- CVSS
- MEDIUM 4.4
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-06-15
- Original CVE updated
- 2026-06-15
- Advisory published
- 2026-06-15
- Advisory updated
- 2026-06-15
Who should care
Administrators and users of PopAd versions up to 1.0.4 should be aware of this vulnerability and take necessary actions to mitigate it.
Technical summary
The vulnerability has a CVSS score of 4.4 and is categorized as CWE-918. The CVSS vector is CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N.
Defensive priority
Administrators should prioritize updating PopAd to a version that fixes this vulnerability.
Recommended defensive actions
- Update PopAd to a version that fixes this vulnerability.
- Review and restrict administrator access to prevent exploitation.
Evidence notes
The vulnerability was reported by [email protected] and has a reference on Patchstack.
Sources and references
Verified primary and authoritative sources
-
CVE-2025-60175 CVE Program record
Publisher, destination, and source semantics verified
URL: https://www.cve.org/CVERecord?id=CVE-2025-60175
CVE Program - Official CVE Program record with source-provided CVE metadata.
-
CVE-2025-60175 NVD vulnerability detail
Publisher, destination, and source semantics verified
URL: https://nvd.nist.gov/vuln/detail/CVE-2025-60175
NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.
Methodology and review provenance
AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.