{"vulnerability": "CVE-2025-4177", "sightings": [{"uuid": "7a54dada-a128-4d26-8479-f832889a8bed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4177", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo65ruzt6n2j", "content": "", "creation_timestamp": "2025-05-02T06:07:35.625965Z"}, {"uuid": "9db784bb-1240-4da8-bd00-cdb5888d8694", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4177", "type": "seen", "source": "https://t.me/cvedetector/24326", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4177 - Flynax Bridge - Unauthenticated User Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4177 \nPublished : May 2, 2025, 3:15 a.m. | 1\u00a0hour, 33\u00a0minutes ago \nDescription : The Flynax Bridge plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the deleteUser() function in all versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers to delete arbitrary users. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-02T07:34:56.000000Z"}, {"uuid": "2e3c4b8b-31b3-4d24-9250-ccebb6ce393c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-41771", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3msznpohxz727", "content": "Phoenix Contact patched three PLCnext flaws, including CVE-2025-41771, which lets an attacker execute unauthorized SQL queries, plus a CVSS 9.8 RCE bug.\n\n#PhoenixContact #PLCnext #SQLInjection #CVE202541771 #ICS #OTSecurity #Cybersecurity", "creation_timestamp": "2026-08-14T07:39:23.975890Z"}, {"uuid": "1a677797-bec3-489d-b525-64fe2ea16e1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-41770", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/117081508015288555", "content": "#OT #Advisory VDE-2025-056Phoenix Contact: Improper Input Validation Vulnerabilities in PLCnext Firmware\nThis advisory addresses multiple security vulnerabilities in PLCnext firmware versions prior to 2026.0.3. The vulnerabilities may allow unauthenticated attackers to cause denial of service, trigger unexpected system behavior, or execute unauthorized SQL queries. Successful exploitation could impact the availability, integrity, and confidentiality of affected PLCnext Control devices. All issues are resolved in PLCnext firmware version 2026.0.3.#CVE CVE-2025-41769, CVE-2025-41770, CVE-2025-41771\nhttps://certvde.com/en/advisories/vde-2025-056/\n#CSAF https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-056.json", "creation_timestamp": "2026-08-12T08:07:14.571391Z"}, {"uuid": "52b77ddd-0350-481a-997c-cf1604268ec6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-41771", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/117081508015288555", "content": "#OT #Advisory VDE-2025-056Phoenix Contact: Improper Input Validation Vulnerabilities in PLCnext Firmware\nThis advisory addresses multiple security vulnerabilities in PLCnext firmware versions prior to 2026.0.3. The vulnerabilities may allow unauthenticated attackers to cause denial of service, trigger unexpected system behavior, or execute unauthorized SQL queries. Successful exploitation could impact the availability, integrity, and confidentiality of affected PLCnext Control devices. All issues are resolved in PLCnext firmware version 2026.0.3.#CVE CVE-2025-41769, CVE-2025-41770, CVE-2025-41771\nhttps://certvde.com/en/advisories/vde-2025-056/\n#CSAF https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-056.json", "creation_timestamp": "2026-08-12T08:07:14.630548Z"}, {"uuid": "102f1e62-1dc1-48ad-a738-fa1591463798", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-41770", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bs6c7izi2miza", "content": "CVE-2025-41770 - Unauthenticated Denial of Service\nCVE ID : CVE-2025-41770\n \n Published : Aug. 12, 2026, 8:06 a.m. | 21\u00a0minutes ago\n \n Description : An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote atta...", "creation_timestamp": "2026-08-12T08:49:23.465980Z"}, {"uuid": "6671d661-b0d6-45de-8c51-c268898be56c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-41771", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bzhod4u7cmjyl", "content": "CVE-2025-41771 - SQL injection\nCVE ID : CVE-2025-41771\n \n Published : Aug. 12, 2026, 8:06 a.m. | 21\u00a0minutes ago\n \n Description : An authenticated attacker with low privileges can access an endpoint in the controller\u2019s web interface that is vulnerable to SQL injection. The vuln...", "creation_timestamp": "2026-08-12T08:51:23.803254Z"}, {"uuid": "cb805098-52c3-4f74-a9c0-eaa88a800841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-41770", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msuvsflv6u2n", "content": "PLCnext Engineer\u306e\u901a\u4fe1\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u306b\u8a8d\u8a3c\u4e0d\u8981\u306eDoS\u8106\u5f31\u6027\u304c\u3042\u308a\u3001\u30ea\u30e2\u30fc\u30c8\u653b\u6483\u8005\u306f\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u30a2\u30d7\u30ea\u7d4c\u7531\u3067\u30a2\u30af\u30bb\u30b9\u3092\u59a8\u5bb3\u3067\u304d\u308b\u3002PLCnext\u30b5\u30fc\u30d3\u30b9\u518d\u8d77\u52d5\u307e\u3067\u901a\u4fe1\u4e0d\u53ef\u3068\u306a\u308b\u53ef\u80fd\u2026\nCVE-2025-41770 CVSS 7.5 | HIGH\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-41770", "creation_timestamp": "2026-08-12T10:20:46.402182Z"}, {"uuid": "2e4edc43-65f3-4fd8-adf1-280cb1b4a7df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-41770", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msuy4dyus324", "content": "\ud83d\udfe0 CVE-2025-41770 - High (7.5)\n\nAn unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2025-41770/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-12T11:02:07.966356Z"}]}