Lucene search
K

CVE-2025-69516

🗓️ 29 Jan 2026 00:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 8 Views🌐 WEB

SSTI in Tactical RMM report preview endpoint enables remote command execution via unsanitized template_md in vulnerable versions.

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
GithubExploit
Exploit for Improper Neutralization of Special Elements Used in a Template Engine in Amidaware Tactical_Rmm
14 Mar 202601:20
githubexploit
GithubExploit
Exploit for CVE-2025-69516
10 Feb 202601:40
githubexploit
ATTACKERKB
CVE-2025-69516
29 Jan 202600:00
attackerkb
Circl
CVE-2025-69516
29 Jan 202622:22
circl
CNNVD
Tactical RMM security vulnerabilities
29 Jan 202600:00
cnnvd
Cvelist
CVE-2025-69516
29 Jan 202600:00
cvelist
EUVD
EUVD-2025-206512
29 Jan 202600:00
euvd
Metasploit
Tactical RMM Jinja2 SSTI Remote Code Execution
5 Mar 202618:59
metasploit
NVD
CVE-2025-69516
29 Jan 202620:16
nvd
Packet Storm
📄 Tactical RMM Jinja2 SSTI Remote Code Execution
5 Mar 202600:00
packetstorm
Rows per page
NVD
Node
ParameterPositionPathDescriptionCWE
template_mdrequest bodyreporting/templates/preview/Server-Side Template Injection via unsanitized user-controlled Jinja2 template in template_md enabling arbitrary code execution on the server.CWE-1336

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

13 Feb 2026 20:33Current
6.1Medium risk
Vulners AI Score6.1
CVSS 3.18.8
EPSS0.55581
SSVC
8