CVE-2026-25195

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by supplying a crafted firmware update file via the firmware update route...

CVE-2026-25195

creationtimestamp| type| source ---|---|--- 2026-02-26 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10 2026-02-27 03:07:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfsq7idgdh2u 2026-02-27 05:20:31+00:00| seen|...