rommapp

Products

ProductCVEsExploitedLatest
romm5–Dec 3, 2025

Exploited and recent CVEs

  • CVE-2025-65097 High 7.1 Insecure Direct Object Reference (IDOR) Allows Unauthorized Deletion of User Collections 0.2%
  • CVE-2025-65096 Medium 5.3 RomM Insecure Direct Object Reference (IDOR) Allows Unauthorized Access to Private Collections 0.2%
  • CVE-2025-65027 High 7.6 RomM Chained XSS and CSRF Vulnerabilities Enable Admin Account Takeover 0.3%
  • CVE-2025-54071 Critical 9.4 RomM's authenticated arbitrary file write vulnerability can lead to Remote Code Execution 0.8%
  • CVE-2025-53908 High 8.3 RomM vulnerable to Authenticated Path Traversal 0.5%