What is CVE-2025-24026?

CVE-2025-24026 is a medium-severity vulnerability in Combodo Itop, classified under Inefficient Regular Expression Complexity. CVSS score: 5.3/10. Published 2025-05-14.

How severe is CVE-2025-24026?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Combodo Itop

CVE-2025-24026

iTop is an web based IT Service Management tool. Versions prior to 3.2.1 are vulnerable to regular expression denial of service (ReDoS) that may, under some circumstances, affect iTop server. Version 3.2.1 doesn't use the affected variable…

Vulnerability class: ReDoS (Regular Expression Denial of Service)

EPSS: 0.003 (17.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Combodo Itop — versions < 3.2.1

Weakness classification (CWE)

CWE-1333 — Inefficient Regular Expression Complexity

References

security-advisories@github.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2025-24026?: CVE-2025-24026 is a medium-severity vulnerability in Combodo Itop, classified under Inefficient Regular Expression Complexity. CVSS score: 5.3/10. Published 2025-05-14.
How severe is CVE-2025-24026?: Medium severity. CVSS v3 base score is 5.3 out of 10.