CVE-2025-61156

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Incorrect access control in the kernel driver of ThreatFire System Monitor v4.7.0.53 allows attackers to escalate privileges and execute arbitrary commands via an insecure IOCTL.

Published 2025-10-29. Last modified 2026-06-17.