CVE-2025-63261

CVE-2025-63261 describes a command injection vulnerability found in AWStats version 8.0, specifically exploitable through the 'open' function. This flaw carries a CVSS score of 7.8 (High), indicating that an attacker with low local privileges can exploit it with low complexity to achieve high impacts on confidentiality, integrity, and availability. Despite its severity, there is currently no evidence of active exploitation, no public exploit code available on platforms like Metasploit or ExploitDB, and minimal community discussion. The vulnerability is not listed in CISA's Known Exploited Vulnerabilities catalog, suggesting a low probability of widespread exploitation at this time.