CyberSecBulletin

Pig4cloud vulnerabilities

We track 2 vulnerabilities in Pig4cloud products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 7, 2025.

2vulnerabilities
2critical
0high
0exploited
9.3average CVSS score

Latest Pig4cloud vulnerabilities

  • 9.6 Critical severity

    Pig: Improper Authorization

    CVE-2025-63691Pig4cloud

    In pig-mesh In Pig version 3.8.2 and below, within the Token Management function under the System Management module, the token query interface (/api/admin/sys-token/page) has an improper permission verification issue, which leads to information leakage. This i

  • 9.1 Critical severity

    Pig: Use of Externally-Controlled Input to Select Classes or Code

    CVE-2025-63690Pig4cloudEPSS 1.06%

    In pig-mesh Pig versions 3.8.2 and below, when setting up scheduled tasks in the Quartz management function under the system management module, it is possible to execute any Java class with a parameterless constructor and its methods with parameter type String