Is CVE-2025-8558 actively exploited?

No active exploitation of CVE-2025-8558 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2025-8558 be exploited remotely?

Partially. CVE-2025-8558 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2025-8558?

CVE-2025-8558 has a CVSS score of 5.4 (MEDIUM).

HOME VULNERABILITIESCVE-2025-8558

MEDIUM

CVE-2025-8558

CWE-306Published: November 3, 2025· Updated: Jun 17, 2026

5.4

CVSS v3.1

Official Description

Insider Threat Management (ITM) Server versions prior to 7.17.2 contain an authentication bypass vulnerability that allows unauthenticated users on an adjacent network to perform agent unregistration when the number of registered agents exceeds the licensed limit. Successful exploitation prevents the server from receiving new events from affected agents, resulting in a partial loss of integrity and availability with no impact to confidentiality.

NVD Source

Technical Analysis

CVE-2025-8558 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.