PatchTheCVEaris vulnerabilities and fixes
Recent CVEs affecting aris, with upgrade or downgrade steps. 2 tracked.
aris has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-01-07. Highest priority: CVE-2025-66838 (score 30/100).
- CVE-2025-66838 MEDIUM 6.5 UPGRADE In Aris v10.0.23.0.3587512 and before, the file upload functionality does not enforce any rate limiting or thr
- CVE-2025-66837 MEDIUM 6.8 UPGRADE A file upload vulnerability in ARIS 10.0.23.0.3587512 allows attackers to execute arbitrary code via uploading
FAQ
How do I fix aris vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is aris being exploited right now?
None of the tracked aris CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which aris CVE should I patch first?
CVE-2025-66838 currently ranks highest (30/100): In Aris v10.0.23.0.3587512 and before, the file upload functionality does not enforce any rate limiting or thr.