PatchTheCVEinformer vulnerabilities and fixes
Recent CVEs affecting informer, with upgrade or downgrade steps. 1 tracked.
informer has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-12-17. Highest priority: CVE-2025-65185 (score 16/100).
- CVE-2025-65185 LOW 2.8 DOWNGRADE There is a username enumeration via local user login in Entrinsik Informer v5.10.1 which allows malicious user
FAQ
How do I fix informer vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is informer being exploited right now?
None of the tracked informer CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which informer CVE should I patch first?
CVE-2025-65185 currently ranks highest (16/100): There is a username enumeration via local user login in Entrinsik Informer v5.10.1 which allows malicious user.