CVE-2025-41694

Publication date

2025-12-09 08:12:59

Family

CERTVDE

State

PUBLISHED

Description

A low privileged remote attacker can run the webshell with an empty command containing whitespace. The server will then block until it receives more data, resulting in a DoS condition of the websserver.