CVE-2025-49493: medium-severity vulnerability in Akamai CloudTest
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
70Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actcvss 5.8epss 2.1%
from disclosure to weapon1 day
Published on NVDJun 30
1st PoC+1d
VulnCheck+31d
Akamai CloudTest before 60 2025.06.02 (12988) allows file inclusion via XML External Entity (XXE) injection.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
Affected products
Akamai · CloudTestpublic PoCs found — 4
vulncheckvulncheck.com/xdb/6c91eb555aa9unverifiedvulncheckvulncheck.com/xdb/c5cccb24a7e5unverifiedvulncheckvulncheck.com/xdb/e7ad1df9faf1unverifiedvulncheckvulncheck.com/xdb/77bfe3ac6499unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Akamai CloudTest
In the same product, most dangerous first.