CVE-2025-56333

9.8

CRITICALCVSS v3

Published

December 29, 2025

Affected

7 projects

Assigned by

MITRE

Severity scale

010

Description

An issue in Fossorial fosrl/pangolin v.1.6.2 and before allows a remote attacker to escalate privileges via the 2FA component

pangolin

Crates.ioSomething that will have a pangolin as as mascot

< 1.7.0NVD

Pangolin

NuGet GalleryA framework for declarative UI testing for ASP.NET apps. Browsers: All browsers can be used. With the possibility of automatic update to the latest version.

< 1.7.0NVD

pangolin

More on this CVE

NVD↗GitHub Advisory↗

NPM

Introspected tunnels to localhost HTTP/1.1

< 1.7.0NVD

pangolin

RubyGemsAnt is a nice tool for writing Java build scripts, but Rake is nicer. The only thing missing from Rake is a way to run javac and jar, and although it's easy to run these as shell scripts you have to wait for the JVM to start. In combination with JRuby this gem lets you run javac and jar in your Rake scripts without exec'ing.

< 1.7.0NVD

iconara/pangolin

GitHubRuby wrappers for javac and jar that don't just exec

< 1.7.0NVD

fosrl/pangolin

GitHubIdentity-aware VPN and tunneled reverse proxy for remote access based on WireGuard®.

< 1.7.0NVD

fosrl/pangolin

Docker HubIdentity-aware VPN and tunneled reverse proxy for remote access based on WireGuard®.

< 1.7.0NVD

Security Advisories

CVE-2025-56333

Description

More on this CVE