CVE Daily

CVE-2025-50121

A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS...

Critical CVSS 9.5

Overview

A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
vulnerability exists that could cause unauthenticated remote code execution when a malicious folder is created
over the web interface HTTP when enabled. HTTP is disabled by default.

CWE: CWE-78 Published: 2025-07-11T10:15:23.120
Risk analysis

This vulnerability is rated 🔴 CRITICAL.

  • CVSS: 9.5 (CRITICAL)
  • Detected tags: command_injection, rce (tag impact: VERY HIGH)

Recommended actions:

  • Patch/upgrade immediately (remote code execution).
  • Reduce exposure (WAF/segmentation), minimize attack surface.

Recommended tools

Tags