CVE-2025-5519 MEDIUM

CVE-2025-5519: Information Disclosure in ArgusTech's BILGER

Vendor Argustech

Product BILGER

Weakness CWE-201

Published September 16, 2025

Last update June 5, 2026

View on NVD All CVEs

CVSS base score

6.5/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality Low

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

What the vulnerability does

01Description

Insertion of Sensitive Information Into Sent Data vulnerability in ArgusTech BILGER allows Choosing Message Identifier. This issue affects BILGER: before 2.4.6.

Key dates

02Disclosure timeline

September 16, 2025 CVE published

June 5, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-5519 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/201.html

Related vulnerabilities

04Related CVE

CVE-2026-40161 Tekton Pipelines: Git resolver API mode leaks system-configured API token to user-controlled serverURL CVE-2025-59578 WordPress ShopMagic plugin <= 4.5.6 - Sensitive Data Exposure vulnerability CVE-2026-34226 Happy DOM's fetch credentials include uses page-origin cookies instead of target-origin cookies CVE-2026-24477 AnythingLLM has key leak in `systemSettings.js` CVE-2026-27935 Discourse leaks private topic metadata to non-authorized users