CVE-2025-8760 CRITICAL

CVE-2025-8760: INSTAR 2K+/4K fcgi_server base64_decode buffer overflow

Vendor Instar
Product 2K+
Weakness CWE-120
Published August 13, 2025
Last update August 13, 2025
View on NVD All CVEs

CVSS base score

9.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X

What the vulnerability does

01Description

A vulnerability was identified in INSTAR 2K+ and 4K 3.11.1 Build 1124. This affects the function base64_decode of the component fcgi_server. The manipulation of the argument Authorization leads to buffer overflow. It is possible to initiate the attack remotely.

Key dates

02Disclosure timeline

August 13, 2025 CVE published
August 13, 2025 Record updated