Login Request a demo
Medium severity · published Oct 6, 2026
CVE-2025-8352
Denial-of-service vulnerability in ESET PROTECT On-Prem
6.9
CVSS
0.3%
EPSS
No
On KEV
Description
Allocation of resources without limits or throttling vulnerability in ESET PROTECT On-Prem increased resource consumption (CPU and RAM), leading to conditions for a Denial-of-Service attack.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 19% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EP
ESET PROTECT On-Prem · ESET spol. s.r.o
through 12.1.9.0 (with Web Console 12.1.252.0); through 12.0.13.0 (with Web Console 12.0.289.0); through 11.1.16.0 (with Web Console 11.1.149.0) · source: vendor
Affected product
EP
ESET PROTECT On-Prem
ESET spol. s.r.o
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-8352
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-8352
support.eset.com
https://support.eset.com/en/ca8854-eset-customer-advisory-denial-of-service-vulnerability-in-eset-protect-on-prem-fixed