Vaelsys records
4 published records for vendor vaelsys.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 50%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')2
- CWE-266 Incorrect Privilege Assignment1
- CWE-327 Use of a Broken or Risky Cryptographic Algorithm1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
25Monitor | CVE-2026-2952No exploit | Vaelsys HTTP POST Request tree_server.php os command injectionvaelsys · vaelsys · CWE-77 | Medium5.5 | — | 8.3% | Feb 22, 2026 |
23Monitor | CVE-2025-8259No exploit | Vaelsys VaelsysV4 Web interface vgrid_server.php execute_DataObjectProc os command injectionvaelsys · vaelsys · CWE-77 | Medium5.5 | — | 3.2% | Jul 28, 2025 |
22Monitor | CVE-2025-8261No exploit | Vaelsys VaelsysV4 User Creation vgrid_server.php improper authorizationvaelsys · vaelsys · CWE-266 | Medium5.5 | — | 0.7% | Jul 28, 2025 |
5Monitor | CVE-2025-8260No exploit | Vaelsys VaelsysV4 Web interface vgrid_server.php weak hashvaelsys · vaelsys · CWE-327 | Low1.3 | — | 0.2% | Jul 28, 2025 |
- CVE-2026-295225Monitor
Vaelsys HTTP POST Request tree_server.php os command injection
MediumCVSS 5.5No exploitEPSS 8%vaelsys · vaelsysFeb 22, 2026
- CVE-2025-825923Monitor
Vaelsys VaelsysV4 Web interface vgrid_server.php execute_DataObjectProc os command injection
MediumCVSS 5.5No exploitEPSS 3%vaelsys · vaelsysJul 28, 2025
- CVE-2025-826122Monitor
Vaelsys VaelsysV4 User Creation vgrid_server.php improper authorization
MediumCVSS 5.5No exploitEPSS 0%vaelsys · vaelsysJul 28, 2025
- CVE-2025-82605Monitor
Vaelsys VaelsysV4 Web interface vgrid_server.php weak hash
LowCVSS 1.3No exploitEPSS 0%vaelsys · vaelsysJul 28, 2025