CRITICAL Published Sep 22, 2026 CVE-2026-25254 CVE-2026-25254 published: Improper authorization leads to Remote Code Execution via SocketIO interface. View full NVD advisory → Related reading How CVE Scoring Works: Understanding CVSS Severity Ratings ← Back to CVE watch