CVE-2025-26818

Netwrix Password Secure through 9.2 allows command injection...

CVE-2025-26818

Netwrix Password Secure versions 9.2 and earlier are vulnerable to a command injection flaw (CWE-94). This vulnerability allows an attacker to potentially execute system commands, which could lead to unauthorized access or full control of the system. While the risk is significant, the provided do...

Netwrix Password Secure security vulnerability

Netwrix Password Secure is an enterprise-class password management solution from Netwrix designed to help organizations securely store, manage and share passwords and other sensitive information. A security vulnerability exists in Netwrix Password Secure version 9.2.0.32454, which stems from an O...

PT-2025-14793 · Netwrix · Netwrix Password Secure

Name of the Vulnerable Software and Affected Versions: Netwrix Password Secure version 9.2.0.32454 Description: The issue allows OS command injection and authenticated remote code execution. This means an attacker can execute system commands and run code on other users' systems. The vulnerability...

CVE-2025-26817

Netwrix Password Secure version 9.2.0.32454 is vulnerable to OS command injection , which can lead to authenticated remote code execution . This flaw allows an attacker to execute arbitrary system commands and run code on other users' systems. While the root cause is not specified in detail, the ...

PT-2025-14794 · Netwrix · Netwrix Password Secure

Name of the Vulnerable Software and Affected Versions: Netwrix Password Secure versions 9.2 and earlier Description: The issue allows command injection. This means that an attacker could potentially execute system commands, which could lead to unauthorized access or control of the system...

Netwrix Password Secure security vulnerability

Netwrix Password Secure is an enterprise-class password management solution from Netwrix designed to help organizations securely store, manage and share passwords and other sensitive information. A security vulnerability exists in Netwrix Password Secure 9.2 and earlier versions that stems from a...

CVE-2025-26817

Netwrix Password Secure 9.2.0.32454 allows OS command injection...

CVE-2025-26817

Netwrix Password Secure 9.2.0.32454 allows OS command injection...

CVE-2024-36075

The CoSoSys Endpoint Protector through 5.9.3 and Unify agent through 7.0.6 is susceptible to an arbitrary code execution vulnerability due to the way an archive obtained from the Endpoint Protector or Unify server is extracted on the endpoint. An attacker who is able to modify the archive on the...

CVE-2024-36074

Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the Endpoint Protector and Unify agent in the way that the EasyLock dependency is acquired from the server. An attacker with administrative access to the Endpoint...

CVE-2024-36073

Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the shadowing component of the Endpoint Protector and Unify agent which allows an attacker with administrative access to the Endpoint Protector or Unify server to...

CVE-2024-36075

CoSoSys Endpoint Protector (versions 5.9.3 and earlier) and Unify agent (versions 7.0.6 and earlier) are susceptible to an arbitrary code execution vulnerability. The root cause lies in the insecure way an archive obtained from the Endpoint Protector or Unify server is extracted on the endpoint. ...

Netwrix CoSoSys Endpoint Protector Security Vulnerability

Netwrix CoSoSys Endpoint Protector is a cross-platform data loss prevention system from Netwrix. The system supports USB and peripheral port control, dynamic data scanning, USB encryption and static data scanning. A security vulnerability exists in Netwrix CoSoSys Endpoint Protector version 5.9.3...

CVE-2024-36073: Improper Neutralization of Special Elements used in a Command

Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the shadowing component of the Endpoint Protector and Unify agent which allows an attacker with administrative access to the Endpoint Protector or Unify server to...

CVE-2024-36074

Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the Endpoint Protector and Unify agent in the way that the EasyLock dependency is acquired from the server. An attacker with administrative access to the Endpoint...

CVE-2024-36072: Logging of Excessive Data

Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the logging component of the Endpoint Protector and Unify server application which allows an unauthenticated remote attacker to send a malicious request, resulting in...

CVE-2024-36072

Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the logging component of the Endpoint Protector and Unify server application which allows an unauthenticated remote attacker to send a malicious request, resulting in...

PT-2024-26881 · Cososys +1 · Cososys Unify +1

Name of the Vulnerable Software and Affected Versions: Netwrix CoSoSys Endpoint Protector versions 5.9.3 and earlier CoSoSys Unify versions 7.0.6 and earlier Description: The issue concerns a remote code execution vulnerability in the logging component of the server application. This vulnerabilit...

CVE-2024-36072

Netwrix CoSoSys Endpoint Protector (versions 5.9.3 and earlier) and CoSoSys Unify (versions 7.0.6 and earlier) are vulnerable to a remote code execution vulnerability. The flaw exists within the logging component of the server application, where an unauthenticated remote attacker can send a malic...