CVE-2025-41268

Name of the Vulnerable Software and Affected Versions Waterfall WF-500 TX and RX Hosts version 7.9.1.0 R2502171040

Description A relative path traversal issue exists in the Administration WebUI. This allows remote unauthenticated attackers to delete arbitrary files on the host machines. Relative path traversal is a technique where an attacker uses special characters, such as dot-dot-slash (../), to access files and directories outside the intended folder.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.