CVE-2025-34079

NSClient++ 0.5.2.35 exposes an authenticated remote code execution via the ExternalScripts API when the web interface and ExternalScripts module are enabled. An attacker who has administrator credentials can authenticate to the web interface (default port 8443), inject arbitrary commands through ...