CVE-2025-41279

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' in the Administration WebUI in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that allows remote authenticated attackers to execute arbitrary operating syste...

PT-2026-44819

Name of the Vulnerable Software and Affected Versions Waterfall WF-500 RX Host version 7.9.1.0 R2502171040 Description An OS Command Injection issue exists when a MySQL connector is configured. This allows attackers with access to the TX Host to execute arbitrary code on the RX Host due to improp...