CVE-2025-34185: Ilevia Eve x1 Server Firmware

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Ilevia EVE X1 Server version ≤ 4.7.18.0.eden contains a pre-authentication file disclosure vulnerability via the 'db_log' POST parameter. Remote attackers can retrieve arbitrary files from the server, exposing sensitive system information and credentials.

Affected products

• Ilevia Eve x1 Server Firmware: up to and including 4.7.18.0

Published 2025-09-16. Last modified 2026-06-17.