CVE-2025-26500: Wind River Systems Vxworks 7

Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days.

: Uncontrolled Resource Consumption vulnerability in Wind River Systems VxWorks 7 on VxWorks allows Excessive Allocation.   Specifically crafted USB packets may lead to the system becoming unavailable This issue affects VxWorks 7: from 22.06 through 24.03.

Affected products

• Wind River Systems Vxworks 7: from 22.06, up to and including 24.03

Published 2025-03-21. Last modified 2026-06-17.