CVE-2025-59528Vulnerability
Reported by 2 independent sources · first reported by CERT-EU · last reported
Last reported 10 days ago
EPSS86.2%
higher than 99% of CVEsFIRST EPSS, as of 21 Oct 2026
higher than 99% of CVEsFIRST EPSS, as of 21 Oct 2026
What the reports say
2 reports, newest first · the exact sentence from each-
Sekoia Honeypot Captures an Attack on GenAI Infrastructure“…tercepts exploitation attempts targeting several known vulnerabilities, including the CustomMCP remote code execution vulnerability (CVE-2025-59528), the CSV Agent remote code execution vulnerability (CVE-2026-41264), and authentication bypass and credential disclosure flaws simi…”
-
Cyber Brief 26-05 - April 2026“Exploitation of critical Flowise RCE vulnerability CVE-2025-59528”
Indicators reported together
named in the same reports- hxxp://154.217.251[.]226:19999/flowise-hbin 1 report
- 154.217.251[.]226in 1 report
- 98br[.]orgin 1 report
- 98br[.]gamein 1 report
- gr99[.]topin 1 report
- 11kk[.]coin 1 report
Copy these 6 indicators · defanged
Also named with it: CVE-2026-35616, CVE-2026-32201, CVE-2025-55182, CVE-2026-41264, CVE-2024-31621, CVE-2022-24934
Thanks — we review every report.