CVE-2025-63261: Awstats

High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days.

AWStats 8.0 is vulnerable to Command Injection via the open function

Affected products

• Awstats Awstats: version 7.9 only
• Debian Debian Linux: version 11.0 only

Published 2026-03-20. Last modified 2026-06-17.