PatchTheCVEdeviceon\/iedge vulnerabilities and fixes
Recent CVEs affecting deviceon\/iedge, with upgrade or downgrade steps. 4 tracked.
deviceon\/iedge has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2025-11-06. Highest priority: CVE-2025-59171 (score 45/100).
- CVE-2025-59171 HIGH 7.5 UPGRADE Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse d
- CVE-2025-62630 HIGH 8.8 UPGRADE Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse d
- CVE-2025-58423 HIGH 8.8 UPGRADE Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to cause a de
- CVE-2025-64302 MEDIUM 6.4 UPGRADE Insufficient input sanitization in the dashboard label or path can allow an attacker to trigger a device erro
FAQ
How do I fix deviceon\/iedge vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is deviceon\/iedge being exploited right now?
None of the tracked deviceon\/iedge CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which deviceon\/iedge CVE should I patch first?
CVE-2025-59171 currently ranks highest (45/100): Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse d.