Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2025-52694: Successful exploitation of the SQL injection vulnerability could allow an unauthenticated remote attacker to e

73
This week
CRITICAL 10.0REMOTEWATCHLISTUPGRADEUPGRADEUPGRADE

CVE-2025-52694 is a critical-severity flaw (CVSS 10.0) affecting iot edge linux docker, iot edge windows, iotsuite growth linux docker. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Successful exploitation of the SQL injection vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the vulnerable service when it is exposed to the Internet, potentially affecting data confidentiality, integrity, and availability. Users and administrators of affected product versions are advised to update to the latest versions immediately.

Why this priority

  • Critical severity
  • EPSS top 1%: very likely to be exploited
  • CISA SSVC: automatable with total technical impact
  • Remotely exploitable, no login, no user action
  • On your watchlist

A fixed release or distro patch exists.

Risk facts

CVSS score10.0 (Critical)
Attack vectorNetwork (remote)
Attack complexityLow
Privileges neededNone
User interactionNone
EPSS exploit chance39.9% (top 1%)
CISA exploited listNo
WeaknessCWE-89
Published2026-01-12
Last modified2026-06-17
Publisher (CNA): CSA · Vendor: advantech

Share: LinkedIn · X · Reddit

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

advantech iot edge linux docker UPGRADE
Affected: < 2.0.2
Fixed in: 2.0.2
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy iot-edge-linux-docker || rpm -q iot-edge-linux-docker || iot-edge-linux-docker --version
2. UPGRADE to 2.0.2 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade iot-edge-linux-docker
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade iot-edge-linux-docker
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
advantech iot edge windows UPGRADE
Affected: < 2.0.2
Fixed in: 2.0.2
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy iot-edge-windows || rpm -q iot-edge-windows || iot-edge-windows --version
2. UPGRADE to 2.0.2 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade iot-edge-windows
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade iot-edge-windows
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
advantech iotsuite growth linux docker UPGRADE
Affected: < 2.0.2
Fixed in: 2.0.2
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy iotsuite-growth-linux-docker || rpm -q iotsuite-growth-linux-docker || iotsuite-growth-linux-docker --version
2. UPGRADE to 2.0.2 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade iotsuite-growth-linux-docker
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade iotsuite-growth-linux-docker
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
advantech iotsuite saas composer UPGRADE
Affected: < 3.4.15
Fixed in: 3.4.15
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy iotsuite-saas-composer || rpm -q iotsuite-saas-composer || iotsuite-saas-composer --version
2. UPGRADE to 3.4.15 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade iotsuite-saas-composer
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade iotsuite-saas-composer
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
advantech iotsuite starter linux docker UPGRADE
Affected: < 2.0.2
Fixed in: 2.0.2
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy iotsuite-starter-linux-docker || rpm -q iotsuite-starter-linux-docker || iotsuite-starter-linux-docker --version
2. UPGRADE to 2.0.2 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade iotsuite-starter-linux-docker
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade iotsuite-starter-linux-docker
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

Exact fixes by distribution

Fedora 46 · jgmenu · FIXED · 4.7.0-1.fc46 · FEDORA-2026-3053ee4399 · source
sudo dnf upgrade --advisory=FEDORA-2026-3053ee4399
Fedora ELN · python-tkrzw · FIXED · 0.1.32-12.eln159 · FEDORA-2026-0161d71544 · source
sudo dnf upgrade --advisory=FEDORA-2026-0161d71544

Public exploits and detection

Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2025-52694?

iot edge linux docker: upgrade to 2.0.2; iot edge windows: upgrade to 2.0.2; iotsuite growth linux docker: upgrade to 2.0.2. Exact commands for each OS are on this page.

Is CVE-2025-52694 being exploited?

CVE-2025-52694 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2025-52694 affect?

CVE-2025-52694 affects iot edge linux docker, iot edge windows, iotsuite growth linux docker. Severity is critical (CVSS 10.0). Successful exploitation of the SQL injection vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the vulnerable service when it is exposed to the Internet, potentially affecting data confidentia

How urgent is CVE-2025-52694?

Priority 73/100. Critical severity; EPSS top 1%: very likely to be exploited; CISA SSVC: automatable with total technical impact; Remotely exploitable, no login, no user action; On your watchlist

Software pages

Docker vulnerabilities · Windows vulnerabilities · Advantech vulnerabilities

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.