CVE-2025-51726
Quick assessment
Affected
n/a n/a
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
CyberGhostVPN是罗马尼亚CyberGhostVPN公司的个高度优化的VPN服务器。 CyberGhostVPN存在安全漏洞，该漏洞源于使用弱加密哈希算法SHA-1签名且缺乏高熵ASLR，可能导致供应链攻击或权限提升。
Possible ATT&CK Techniques 3 AI
T1036 · Masquerading T1055 · Process Injection T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-51726
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
CyberGhostVPNSetup.exe (Windows installer) is signed using the weak cryptographic hash algorithm SHA-1, which is vulnerable to collision attacks. This allows a malicious actor to craft a fake installer with a forged SHA-1 certificate that may still be accepted by Windows signature verification mechanisms, particularly on systems without strict SmartScreen or trust policy enforcement. Additionally, the installer lacks High Entropy Address Space Layout Randomization (ASLR), as confirmed by BinSkim (BA2015 rule) and repeated WinDbg analysis. The binary consistently loads into predictable memory ranges, increasing the success rate of memory corruption exploits. These two misconfigurations, when combined, significantly lower the bar for successful supply-chain style attacks or privilege escalation through fake installers.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
CyberGhostVPN 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
CyberGhostVPN是罗马尼亚CyberGhostVPN公司的个高度优化的VPN服务器。 CyberGhostVPN存在安全漏洞，该漏洞源于使用弱加密哈希算法SHA-1签名且缺乏高熵ASLR，可能导致供应链攻击或权限提升。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2025-51726
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | None | https://github.com/meisterlos/CVE-2025-51726 | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-51726
请登录查看更多情报信息。
Proof of Concept for CVE-2025-51726 (1)
Same Patch Batch · n/a · 2025-08-04 · 18 CVEs total
| CVE-2025-53394 | 7.7 HIGH | Paramount Macrium Reflect 安全漏洞 |
| CVE-2025-53395 | 7.7 HIGH | Paramount Macrium Reflect 安全漏洞 |
| CVE-2025-8534 | 2.5 LOW | libtiff tiff2ps tiff2ps.c PS_Lvl2page null pointer dereference |
| CVE-2025-51390 | TOTOLINK N600R 安全漏洞 | |
| CVE-2024-45183 | SAMSUNG Exynos 安全漏洞 | |
| CVE-2025-52239 | ZKEACMS 安全漏洞 | |
| CVE-2025-46206 | artifex mupdf 安全漏洞 | |
| CVE-2025-51535 | Austrian Archaeological Institute OpenAtlas 安全漏洞 | |
| CVE-2025-51536 | Austrian Archaeological Institute OpenAtlas 安全漏洞 | |
| CVE-2025-51534 | Austrian Archaeological Institute OpenAtlas 安全漏洞 | |
| CVE-2025-51387 | GitKraken Desktop 安全漏洞 | |
| CVE-2025-50754 | Unisite CMS 安全漏洞 | |
| CVE-2025-50341 | Axelor 安全漏洞 | |
| CVE-2025-50340 | SOGo Webmail 安全漏洞 | |
| CVE-2025-50420 | Freedesktop Poppler 安全漏洞 | |
| CVE-2025-44643 | Draytek多款产品 安全漏洞 | |
| CVE-2025-26065 | Intelbras RX1500 安全漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2025-51726
No comments yet