CVE-2025-49493

Akamai CloudTest before 60 2025.06.02 (12988) allows file inclusion via XML External Entity (XXE) injection.

CVSS v3.1

5.8 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

EPSS

3.40% chance of exploitation in the next 30 days, 88th percentile

Nuclei

critical · CWE-611

Published

2025-06-30

Updated

2025-09-24

Proof-of-concept exploits (1)

• sh4den/CVE-2025-49493

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49493.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2022-23093
• CVE-2022-26265
• CVE-2022-27925
• CVE-2022-31814
• CVE-2022-36804
• CVE-2022-46169