PT-2025-19893 · R Fx Networks · R-Fx Networks Linux Malware Detect

CVE-2025-26262

·

Published

2025-05-06

·

Updated

2025-05-06

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions R-fx Networks Linux Malware Detect version 1.6.5
Description The issue allows attackers to escalate privileges and execute arbitrary code via supplying a file that contains a crafted filename. This is related to the component /internals/functions.
Recommendations For R-fx Networks Linux Malware Detect version 1.6.5, consider restricting access to the /internals/functions component to minimize the risk of exploitation. Avoid using crafted filenames in the affected component until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Command Injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-26262

Affected Products

R-Fx Networks Linux Malware Detect