CVE-2025-60595

SPH Engineering UgCS 5.13.0 is vulnerable to Arbitary code execution...

CVE-2025-60595

SPH Engineering UgCS 5.13.0 , a UAV mission planning and flight control software, is vulnerable to Arbitrary Code Execution via a command injection flaw. The root cause is located in Ardupilot/mavparse.py (lines 230 to 243), where the parser reads XML attributes and uses eval() to set values. An ...