CVE-2025-8760 | INSTAR 2K+/4K 3.11.1 Build 1124 fcgi_server base64_decode Authorization buffer overflow (MZ-25-03)

A vulnerability, which was classified as critical, was found in INSTAR 2K+ and 4K 3.11.1 Build 1124. This affects the function base64_decode of the component fcgi_server. The manipulation of the argument Authorization leads to buffer overflow.

This vulnerability is uniquely identified as CVE-2025-8760. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to apply restrictive firewalling.