Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-29331
9.8
CRITICALCVSS v3
Published
June 26, 2025
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
An issue in MHSanaei 3x-ui before v.2.5.3 and before allows a remote attacker to execute arbitrary code via the management script x-ui passes the no check certificate option to wget when downloading updates
MHSanaei/3x-ui
GitHubXray panel supporting multi-protocol multi-user expire day & traffic & IP limit (Vmess, Vless, Trojan, ShadowSocks, Wireguard, Hysteria, Tunnel, Mixed, HTTP, Tun, MTProto)
GitHubXray panel supporting multi-protocol multi-user expire day & traffic & IP limit (Vmess, Vless, Trojan, ShadowSocks, Wireguard, Hysteria, Tunnel, Mixed, HTTP, Tun, MTProto) < 2.5.3NVD