Product
CVE-2026-25254 is a critical vulnerability in the SocketIO interface allowing unauthenticated attackers to achieve remote code execution through improper authorization checks.