PatchTheCVEprimakon vulnerabilities
Recent CVEs affecting primakon products. 7 tracked.
primakon has 7 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-11-25. Highest priority: CVE-2025-64063 (score 48/100).
- CVE-2025-64067 MEDIUM 5.3 DOWNGRADE Primakon Pi Portal 1.0.18 API endpoints responsible for retrieving object-specific or filtered data (e.g., use
- CVE-2025-64066 HIGH 8.6 DOWNGRADE Primakon Pi Portal 1.0.18 REST /api/v2/user/register endpoint suffers from a Broken Access Control vulnerabili
- CVE-2025-64065 HIGH 8.8 DOWNGRADE The Primakon Pi Portal 1.0.18 API /api/V2/pp_udfv_admin endpoint, fails to perform necessary server-side valid
- CVE-2025-64064 HIGH 8.8 DOWNGRADE Primakon Pi Portal 1.0.18 /api/v2/pp_users endpoint fails to adequately check user permissions before processi
- CVE-2025-64063 CRITICAL 9.8 DOWNGRADE Primakon Pi Portal 1.0.18 API endpoints fail to enforce sufficient authorization checks when processing reques
- CVE-2025-64062 HIGH 8.8 DOWNGRADE The Primakon Pi Portal 1.0.18 /api/V2/pp_users?email endpoint is used for user data filtering but lacks proper
- CVE-2025-64061 MEDIUM 4.3 DOWNGRADE Primakon Pi Portal 1.0.18 /api/v2/users endpoint is vulnerable to unauthorized data exposure due to deficient
FAQ
How do I fix primakon vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is primakon being exploited right now?
None of the tracked primakon CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which primakon CVE should I patch first?
CVE-2025-64063 currently ranks highest (48/100): Primakon Pi Portal 1.0.18 API endpoints fail to enforce sufficient authorization checks when processing reques.