Is CVE-2025-13295 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2025-13295 being exploited in the wild.

How severe is CVE-2025-13295?

High severity, with a CVSS score of 7.5, published 2 December 2025.

Which products and versions are affected?

Argus Technology Inc. BILGER before 2.4.9.

Is there a fix for CVE-2025-13295?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2025-13295 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2025-13295?

Check whether you run Argusteknoloji Bilger. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-13295: Argus Technology BILGER sensitive information disclosure

CVE-2025-13295 · Severity: high · CVSS 7.5 · Published 2025-12-02

Argus Technology's BILGER software contains a security flaw that can lead to the unintended exposure of sensitive information. An attacker can manipulate message identifiers to access data that should otherwise be protected. This could result in the unauthorized disclosure of confidential business or system information, potentially compromising privacy and operational security.

Technologies: Argusteknoloji Bilger. Vendors: Argusteknoloji.

Quick answers

Is CVE-2025-13295 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2025-13295 being exploited in the wild.
How severe is CVE-2025-13295?: High severity, with a CVSS score of 7.5, published 2 December 2025.
Which products and versions are affected?: Argus Technology Inc. BILGER before 2.4.9.
Is there a fix for CVE-2025-13295?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2025-13295 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2025-13295?: Check whether you run Argusteknoloji Bilger. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A vulnerability classified as CWE-201 (Insertion of Sensitive Information Into Sent Data) exists in Argus Technology Inc. BILGER versions prior to 2.4.9. The flaw allows a remote attacker to choose or manipulate message identifiers, leading to the exposure of sensitive data within transmitted messages. The attack can be carried out over the network without authentication or user interaction. Successful exploitation results in high confidentiality impact as sensitive information is leaked to unauthorized parties. Users are advised to upgrade to version 2.4.9 or later to remediate this issue.

Affected products

Argus Technology Inc. BILGER before 2.4.9

Timeline

2025-12-02: advisory: Initial publication of the vulnerability advisory.

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.