PatchTheCVEsoftwareag vulnerabilities
Recent CVEs affecting softwareag products. 2 tracked.
softwareag has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-01-07. Highest priority: CVE-2025-66838 (score 30/100).
- CVE-2025-66838 MEDIUM 6.5 UPGRADE In Aris v10.0.23.0.3587512 and before, the file upload functionality does not enforce any rate limiting or thr
- CVE-2025-66837 MEDIUM 6.8 UPGRADE A file upload vulnerability in ARIS 10.0.23.0.3587512 allows attackers to execute arbitrary code via uploading
FAQ
How do I fix softwareag vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is softwareag being exploited right now?
None of the tracked softwareag CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which softwareag CVE should I patch first?
CVE-2025-66838 currently ranks highest (30/100): In Aris v10.0.23.0.3587512 and before, the file upload functionality does not enforce any rate limiting or thr.