CVE-2025-26818

Netwrix Password Secure versions 9.2 and earlier are vulnerable to a command injection flaw (CWE-94). This vulnerability allows an attacker to potentially execute system commands, which could lead to unauthorized access or full control of the system. While the risk is significant, the provided do...

CVE-2025-26817

Netwrix Password Secure version 9.2.0.32454 is vulnerable to OS command injection , which can lead to authenticated remote code execution . This flaw allows an attacker to execute arbitrary system commands and run code on other users' systems. While the root cause is not specified in detail, the ...