CVE-2025-9127 HIGH

CVE-2025-9127: PX Enterprise Improper Sanitization Vulnerability

Vendor Pure Storage
Product PX Enterprise
Weakness CWE-116
Published December 4, 2025
Last update December 4, 2025
View on NVD All CVEs

CVSS base score

8.4/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H

What the vulnerability does

01Description

A vulnerability exists in PX Enterprise whereby sensitive information may be logged under specific conditions.

Key dates

02Disclosure timeline

December 4, 2025 CVE published
December 4, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-40567 FreeScout has HTML Injection in Outgoing Emails via Unsanitized Customer Name in Signature Variables CVE-2026-48598 CRLF injection in Tesla.Multipart disposition parameters allows multipart part header injection CVE-2026-34480 Apache Log4j Core: Silent log event loss in XmlLayout due to unescaped XML 1.0 forbidden characters CVE-2025-24025 Coolify Vulnerable to Reflected XSS on Tag Search CVE-2023-24480 Controller stack overflow when decoding messages from the server