CVE-2025-8095
CWE-257Published: April 14, 2026· Updated: Jun 17, 2026
Official Description
The OECH1 prefix encoding is intended to obfuscate values across the OpenEdge platform. It has been identified as cryptographically weak and unsuitable for stored encodings and enterprise applications. OECH1 encodings should be considered exploitable and immediately replaced by any other supported prefix encoding, all of which are based on symmetric encryption.
Risk Analysis
The OECH1 prefix encoding used across the OpenEdge platform has been identified as cryptographically weak and unsuitable for stored encodings and enterprise applications. This critical vulnerability, with a CVSS score of 9.1, means that OECH1 encodings should be considered exploitable, posing a high risk to confidentiality, integrity, and availability. There is no EPSS score or KEV status, but the inherent weakness of the encoding makes it a serious concern.
No public exploit is currently known for this vulnerability. The weakness is in the encoding itself, making it remotely exploitable (AV:N) with low complexity, as an attacker could potentially decrypt or manipulate data encoded with OECH1.
Immediately replace all OECH1 encodings with any other supported prefix encoding, which are based on symmetric encryption. Review all applications and data stores that utilize OECH1 encoding to ensure they are updated.
Technical Analysis
CVE-2025-8095 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.
The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.
CVSS v3.1 Vector Breakdown
Exploit & PoC Resources
All References (1)
Quick Facts
Related CVEs (CWE-257)
Recommended Actions
- →Apply vendor patches immediately
- →Monitor CVE-2025-8095 in threat intel feeds
- →Review IDS/IPS signatures for exploitation attempts