PatchTheCVEuos vulnerabilities and fixes
Recent CVEs affecting uos, with upgrade or downgrade steps. 2 tracked.
uos has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-04-22. Highest priority: CVE-2025-1731 (score 48/100).
- CVE-2025-1732 MEDIUM 6.7 MITIGATE An improper privilege management vulnerability in the recovery function of the Zyxel USG FLEX H series uOS fir
- CVE-2025-1731 HIGH 7.8 UPGRADE An incorrect permission assignment vulnerability in the PostgreSQL commands of the Zyxel USG FLEX H series uOS
FAQ
How do I fix uos vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is uos being exploited right now?
None of the tracked uos CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which uos CVE should I patch first?
CVE-2025-1731 currently ranks highest (48/100): An incorrect permission assignment vulnerability in the PostgreSQL commands of the Zyxel USG FLEX H series uOS.