What is CVE-2025-9998?

CVE-2025-9998 is a vulnerability in Arcinfo Pcvue, classified under Improper Check for Unusual or Exceptional Conditions. Published 2025-09-05.

Is CVE-2025-9998 known to be exploited?

3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Arcinfo Pcvue

CVE-2025-9998

The sequence of packets received by a Networking server are not correctly checked. An attacker could exploit this vulnerability to send specially crafted messages to force the application to stop.

Published 2025-09-05 · last modified 2026-06-17.

EPSS exploit prediction

EPSS: 0.003 (17.3th percentile), scored 2026-10-20.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 17th percentile — 17.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: 0.000

Affected products

Arcinfo Pcvue — versions 16.0.0, 15.0.0, 12.0.0

Weakness classification (CWE)

CWE-754 — Improper Check for Unusual or Exceptional Conditions

Public proof-of-concept exploits

References

87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932 (vendor-advisory)

Frequently asked questions

What is CVE-2025-9998?: CVE-2025-9998 is a vulnerability in Arcinfo Pcvue, classified under Improper Check for Unusual or Exceptional Conditions. Published 2025-09-05.
Is CVE-2025-9998 known to be exploited?: 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.