CVE-2025-14598

CVSS 9.8 CRITICALEPSS 0.7%CWE-89

Vexday Risk Score

28Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 9.8EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

09 Jan 2026Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

BeeS Software Solutions BET Portal contains an SQL injection vulnerability in the login functionality of affected sites. The vulnerability enables arbitrary SQL commands to be executed on the backend database.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

BeeS Software Solutions · BET ePortal

References

https://afnaan.me/cve/cve-2025-14598 https://cloudilyaerp.com/https://github.com/Afnaan-Ahmed/CVE-2025-14598 https://www.kb.cert.org/vuls/id/361400