Critical 9.3Published Sep 19, 2025

CVE-2025-34205Vasion Print (formerly PrinterLogic) Dangerous PHP Dead Code Enables RCE

Updated under an hour ago (Oct 26, 2026, 5:40 PM ET)

Does this affect you?

It affects Vasion Print Virtual Appliance Host and 3 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Vasion Print Virtual Appliance Host

Exploited in the last 30 days

Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.843 and Application prior to 20.0.1923 (VA and SaaS deployments) contains dangerous PHP dead code present in multiple Docker-hosted PHP instances. A script named /var/www/app/resetroot.php (found in several containers) lacks authentication checks and, when executed, performs a SQL update that sets the database administrator username to 'root' and its password hash to the SHA-512 hash of the string 'password'. Separately, commented-out code in /var/www/app/lib/common/oses.php would unserialize session data (unserialize($_SESSION['osdata']))—a pattern that can enable remote code execution if re-enabled or reached with attacker-controlled serialized data. An attacker able to reach the resetroot.php endpoint can trivially reset the MySQL root password and obtain full database control; combined with deserialization issues this can lead to full remote code execution and system compromise. This vulnerability has been identified by the vendor as: V-2023-003 — Dead / Insecure PHP Code.

CVSS: 9.3 CRITICAL (v4.0, CNA)CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Weakness (CWE): CWE-561
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: VulnCheck
NVD analysis: Modified
Record last updated: May 15, 2026
First seen by InfoSec Signals: Oct 18, 2026

Affected products

Affected products

Vasion Print Virtual Appliance Host vasion:print_virtual_appliance_host (from the name)	before 22.0.843	CNA record
Vasion Print Application vasion:print_application (from the name)	before 20.0.1923	CNA record
vasion virtual_appliance_application vasion:virtual_appliance_application	before 20.0.1923	NVD
vasion virtual_appliance_host vasion:virtual_appliance_host	before 22.0.843	NVD

References

References

https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-dead-code	technical-description, exploit, third-party-advisory
https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm	vendor-advisory, patch
https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm	vendor-advisory, patch
https://www.vulncheck.com/advisories/vasion-print-printerlogic-dangerous-php-dead-code-enables-rce	third-party-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.