Seagate Toolkit vulnerabilities

2 CVEs affecting Seagate Toolkit, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-9267, published 2025-09-26.

More from Seagate.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-9267, published 2025-09-26. High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days. In Seagate Toolkit on Windows a vulnerability exists in the Toolkit Installer prior to versions 2.35.0.6 where it attempts to load DLLs from the current working directory without validating their…
• CVE-2025-9043, published 2025-08-14. Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days. The service executable path in Seagate Toolkit on Versions prior to 2.34.0.33 on Windows allows an attacker with Admin privileges to exploit a vulnerability as classified under CWE-428: Unquoted…