Liaoxuefeng Itranswarp — known CVE vulnerabilities

Every CVE whose affected-product data names Liaoxuefeng Itranswarp, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2025-45607 — CVSS 9.8 (critical): An issue in the component /manage/ of itranswarp v2.19 allows attackers to bypass authentication via a crafted request.
• CVE-2025-28041 — CVSS 8.6 (high): Incorrect access control in the doFilter function of itranswarp up to 2.19 allows attackers to access sensitive components without…