CVE-2025-69599

Summary

RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH environment variable. NOTE: this is disputed because ability of an attacker to control the environment is a site-specific misconfiguration.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: total

Additional References

• https://github.com/Wise-Security/CVE-2025-69599

References

• https://support.raynet.de/hc/en-us/articles/19518792826132-RVY200865-RayVentory-12-6
• https://github.com/Wise-Security/CVE-2025-69599

• ←Previous
• Next→