Skip to content
Rrommapp
Products
| Product | CVEs | Exploited | Latest |
| romm | 5 | – | Dec 3, 2025 |
Exploited and recent CVEs
-
CVE-2025-65097
High 7.1
Insecure Direct Object Reference (IDOR) Allows Unauthorized Deletion of User Collections
0.2%
-
CVE-2025-65096
Medium 5.3
RomM Insecure Direct Object Reference (IDOR) Allows Unauthorized Access to Private Collections
0.2%
-
CVE-2025-65027
High 7.6
RomM Chained XSS and CSRF Vulnerabilities Enable Admin Account Takeover
0.3%
-
CVE-2025-54071
Critical 9.4
RomM's authenticated arbitrary file write vulnerability can lead to Remote Code Execution
0.8%
-
CVE-2025-53908
High 8.3
RomM vulnerable to Authenticated Path Traversal
0.5%