CVE-2025-60738

An issue in Ilevia EVE X1 Server Firmware Version v4.7.18.0.eden and before Logic Version v6.00 - 20250721 and before allows a remote attacker to execute arbitrary code via the ping.php component does not perform secure filtering on IP parameters...

CVE-2025-60738

The Ilevia EVE X1 Server is vulnerable to Remote Code Execution (RCE) and Server-Side Request Forgery (SSRF) in firmware versions v4.7.18.0.eden and before (Logic Version v6.00 - 2025_07_21 and before ). The root cause is a failure to perform secure filtering on IP parameters within the ping.php ...