PatchTheCVEthm vulnerabilities
Recent CVEs affecting thm products. 4 tracked.
thm has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-01-12. Highest priority: CVE-2025-62524 (score 28/100).
- CVE-2025-62524 MEDIUM 5.3 UPGRADE PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton
- CVE-2025-62523 MEDIUM 6.3 UPGRADE PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton
- CVE-2025-62781 MEDIUM 5.0 UPGRADE PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton
- CVE-2026-22800 LOW 2.4 UPGRADE PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton
FAQ
How do I fix thm vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is thm being exploited right now?
None of the tracked thm CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which thm CVE should I patch first?
CVE-2025-62524 currently ranks highest (28/100): PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton.