CVE-2025-61304

CRITICAL 9.8CVE-2025-61304 · Published 05/11/2025 · updated 17/06/2026

In short

CVE-2025-61304 is a CRITICAL (CVSS 9.8) vulnerability affecting activegate ping extension (dynatrace).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 79.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
activegate ping extension dynatrace	`≤ 1.016`	No fix yet

OS command injection vulnerability in Dynatrace ActiveGate ping extension up to 1.016 via crafted ip address.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.