Beveiligingsadvies

CVE-2025-52365

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-03 00:00:00
Laatst bijgewerkt 2026-03-03 15:40:44
Toegewezen door mitre
CVSS-score 7.8
Status PUBLISHED

Beschrijving

A command injection vulnerability in the szc script of the ccurtsinger/stabilizer repository allows remote attackers to execute arbitrary system commands via unsanitized user input passed to os.system(). The vulnerability arises from improper input handling where command-line arguments are directly concatenated into shell commands without validation