Search/CVE-2025-41351
● CVE

CVE-2025-41351

DiscoveredJan 28, 2026UpdatedApr 15, 2026

Vulnerability that allows a Padding Oracle Attack to be performed on the Funambol v30.0.0.20 cloud server. The thumbnail display URL allows an attacker to decrypt and encrypt the parameters used by the application to generate ‘self-signed’ access URLs.

View graph Watch Export
CVSS v3.1
—
EPSS
0.20%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 25, 2026
● 0.00pp
0.19% → 0.20% over 5 tracked changes
Connections
1 relationships
Timeline
disclosure → media coverage
Jan 28, 2026
Disclosure — published as a CVE record. · last revised by NVD Apr 15, 2026