PatchTheCVEonespan vulnerabilities
Recent CVEs affecting onespan products. 1 tracked.
onespan has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-05-21. Highest priority: CVE-2025-25539 (score 32/100).
- CVE-2025-25539 MEDIUM 6.5 UPGRADE Local File Inclusion vulnerability in Vasco v3.14and before allows a remote attacker to obtain sensitive infor
FAQ
How do I fix onespan vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is onespan being exploited right now?
None of the tracked onespan CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which onespan CVE should I patch first?
CVE-2025-25539 currently ranks highest (32/100): Local File Inclusion vulnerability in Vasco v3.14and before allows a remote attacker to obtain sensitive infor.