CVE-2025-55618

—

CVSS 3.1

7.3 high

EPSS

<1%p16

Published

Aug 27, 2025 (Aug 27, 2025)

Modified

Jul 5, 2026

Description

In Hyundai Navigation App STD5W.EUR.HMC.230516.afa908d, an attacker can inject HTML payloads in the profile name field in navigation app which then get rendered.

Vendors: hyundai
Products: navigation
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.