PT-2026-44803
CVE-2025-41265
·
Published
2026-05-29
·
Updated
2026-07-21
Description by
CVSS 4.0
8.6
HighMetricsAV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Waterfall WF-500 TX Host version 7.9.1.0 R2502171040
Description
An OS Command Injection issue exists in the Administration WebUI, which allows remote authenticated attackers to execute arbitrary operating system commands on the host. OS Command Injection is a flaw where an application fails to properly neutralize special elements used in an OS command, allowing the execution of unintended commands.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾