CVE-2025-21028: Medium severity ThemeManager ThemeManager vulnerability
Improper privilege management in ThemeManager prior to SMR Sep-2025 Release 1 allows local privileged attackers to reuse trial items.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ThemeManagerto a version that resolves this vulnerability.Patch SMR Sep-2025 Release 1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21028?
CVE-2025-21028 is considered a high severity vulnerability due to its exploitation potential by local privileged attackers.
How do I fix CVE-2025-21028?
To fix CVE-2025-21028, upgrade ThemeManager to the version released in SMR Sep-2025 Release 1 or later.
Who is affected by CVE-2025-21028?
CVE-2025-21028 affects users of ThemeManager versions prior to SMR Sep-2025 Release 1.
What are the risks associated with CVE-2025-21028?
The risks include local privilege escalation, which could allow unauthorized access to restricted functionalities.
When was CVE-2025-21028 disclosed?
CVE-2025-21028 was disclosed in September 2025, highlighting issues in privilege management.