risk value vulnerabilities and fixes

Q: How do I fix risk value vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Q: Is risk value being exploited right now?

None of the tracked risk value CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Q: Which risk value CVE should I patch first?

CVE-2025-26137 currently ranks highest (39/100): Systemic Risk Value <=2.8.0 is vulnerable to Local File Inclusion via /GetFile.aspx?ReportUrl=.

Recent CVEs affecting risk value, with upgrade or downgrade steps. 2 tracked.

Also searched as: riskvalue.

risk value has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-03-18. Highest priority: CVE-2025-26137 (score 39/100).

CVE-2025-26138 MEDIUM 6.5 UPGRADE Systemic Risk Value <=2.8.0 is vulnerable to improper access control in /RiskValue/GroupingEntities/Controls/G
CVE-2025-26137 HIGH 7.5 UPGRADE Systemic Risk Value <=2.8.0 is vulnerable to Local File Inclusion via /GetFile.aspx?ReportUrl=

FAQ

How do I fix risk value vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is risk value being exploited right now?

None of the tracked risk value CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which risk value CVE should I patch first?

CVE-2025-26137 currently ranks highest (39/100): Systemic Risk Value <=2.8.0 is vulnerable to Local File Inclusion via /GetFile.aspx?ReportUrl=.

← Back to latest CVEs