Findings

CVE-2025-14518

A vulnerability was identified in PowerJob up to 5.1.2.

Published Dec 11, 2025 · updated Oct 14, 2026 · powerjob powerjob

A vulnerability was identified in PowerJob up to 5.1.2. This vulnerability affects the function checkConnectivity of the file src/main/java/tech/powerjob/common/utils/net/PingPongUtils.java of the component Network Request Handler. The manipulation of the argument targetIp/targetPort leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Dec 11, 2025 · NIST NVD

    Detected

    A vulnerability was identified in PowerJob up to 5.1.2. This vulnerability affects the function checkConnectivity of the file src/main/java/tech/powerjob/common/utils/net/PingPongUtils.java of the component Network Request Handler. The manipulation of the argument targetIp/targetPort leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit is publicly availa

  2. Oct 14, 2026 · NIST NVD

    Updated

    A vulnerability was identified in PowerJob up to 5.1.2. This vulnerability affects the function checkConnectivity of the file src/main/java/tech/powerjob/common/utils/net/PingPongUtils.java of the component Network Request Handler. The manipulation of the argument targetIp/targetPort leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit is publicly availa

Affected

  • cpe powerjob/powerjobversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2025-14518

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2025-14518

    30-day exploitation probability 0.3%

    first.org
  • NIST NVDVulnerability recordCVE-2025-14518

    A vulnerability was identified in PowerJob up to 5.1.2. This vulnerability affects the function checkConnectivity of the file src/main/java/tech/powerjob/common/utils/net/PingPongUtils.java of the component Network Request Handler. The manipulation of the argument targetIp/target

    nvd.nist.gov

References