Security Advisory

CVE-2025-41673

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-07-21 09:29:32
Last updated 2025-11-03 19:58:57
Assigner CERTVDE
State PUBLISHED

Description

A high privileged remote attacker can execute arbitrary system commands via POST requests in the send_sms action due to improper neutralization of special elements used in an OS command.