Security Advisory

CVE-2025-41726

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-01-27 11:35:37
Last updated 2026-01-27 14:08:37
Assigner CERTVDE
State PUBLISHED

Description

A low privileged remote attacker can execute arbitrary code by sending specially crafted calls to the web service of the Device Manager or locally via an API and can cause integer overflows which then may lead to arbitrary code execution within privileged processes.