PatchTheCVEfanvil vulnerabilities
Recent CVEs affecting fanvil products. 6 tracked.
fanvil has 6 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-12-05. Highest priority: CVE-2025-64053 (score 58/100).
- CVE-2025-64053 HIGH 7.5 MITIGATE A Buffer overflow vulnerability on Fanvil x210 2.12.20 devices allows attackers to cause a denial of service o
- CVE-2025-64055 CRITICAL 9.8 MITIGATE An issue was discovered in Fanvil x210 V2 2.12.20 allowing unauthenticated attackers on the local network to a
- CVE-2025-64057 HIGH 8.3 MITIGATE Directory traversal vulnerability in Fanvil x210 V2 2.12.20 allows unauthenticated attackers on the local netw
- CVE-2025-64056 MEDIUM 4.3 MITIGATE File upload vulnerability in Fanvil x210 V2 2.12.20 allows unauthenticated attackers on the local network to s
- CVE-2025-64054 CRITICAL 9.6 MITIGATE A reflected Cross Site Scripting (XSS) vulnerability on Fanvil x210 2.12.20 devices allows attackers to cause
- CVE-2025-64052 MEDIUM 5.1 MITIGATE An issue was discovered in Fanvil x210 V2 2.12.20 allowing unauthenticated attackers on the local network to e
FAQ
How do I fix fanvil vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is fanvil being exploited right now?
None of the tracked fanvil CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which fanvil CVE should I patch first?
CVE-2025-64053 currently ranks highest (58/100): A Buffer overflow vulnerability on Fanvil x210 2.12.20 devices allows attackers to cause a denial of service o.