CVE Vulnerability Advisory Database

[Affected Scope] All unpatched versions of SiteGuard Server Edition

[Impact] Local attackers with low privileges can execute arbitrary OS commands as root or SYSTEM, leading to full system compromise

[Mitigation] Immediately apply the official security patch from EG Secure and audit local server access permissions

[Affected Scope] SonicWall SMA1000 Appliance Management Console (AMC) management interface

[Impact] A remote authenticated attacker with administrator privileges can execute arbitrary OS commands under specific conditions, leading to complete system compromise

[Mitigation] Immediately apply the official security patches provided by SonicWall and restrict access to the AMC management interface

[Affected Scope] SonicWall SMA1000 appliances utilizing the Appliance Management Console (AMC)

[Impact] An authenticated remote attacker with administrative privileges can execute arbitrary OS commands under specific conditions, potentially leading to full system compromise

[Mitigation] Immediately apply the latest firmware patches provided by SonicWall and restrict external access to the management console

[Affected Scope] Ivanti Sentry versions prior to R10.5.2, R10.6.2, and R10.7.1

[Impact] An unauthenticated remote attacker can execute arbitrary OS commands with root privileges, leading to complete system compromise

[Mitigation] Immediately upgrade to the patched versions (R10.5.2, R10.6.2, R10.7.1, or higher)

[Affected Scope] Soliton FileZen deployments with the Antivirus Check Option enabled

[Impact] An authenticated attacker can execute arbitrary OS commands with elevated privileges by sending a specially crafted HTTP request

[Mitigation] Immediately apply the official vendor security patches, or temporarily disable the Antivirus Check Option and restrict network access

[Affected Scope] Fortinet FortiWeb versions 8.0.0 through 8.0.1, 7.6.0 through 7.6.5, 7.4.0 through 7.4.10, 7.2.0 through 7.2.11, and 7.0.0 through 7.0.11

[Impact] An authenticated attacker can execute arbitrary OS commands with elevated privileges on the underlying system via crafted HTTP requests or CLI commands

[Mitigation] Immediately upgrade to the patched versions (8.0.2, 7.6.6, 7.4.11, 7.2.12, 7.0.12 or higher) as recommended by the vendor

[Affected Scope] Metro Development Server started by React Native Community CLI (binding to external interfaces by default)

[Impact] Unauthenticated network attackers can send a POST request to execute arbitrary executables, and run arbitrary shell commands with controlled arguments on Windows

[Mitigation] Upgrade React Native CLI to the patched version, restrict Metro server binding to localhost (127.0.0.1), and block external access via firewalls

[Affected Scope] N-able N-central versions prior to 2025.3.1

[Impact] An authenticated attacker with low privileges can exploit improper input validation to execute arbitrary OS commands and fully compromise the system

[Mitigation] Immediately upgrade N-able N-central to version 2025.3.1 or later

[Affected Scope] Certain End-of-Life (EOL) GeoVision IP cameras, video servers, and LPR systems

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges, leading to complete device takeover and botnet recruitment

[Mitigation] Since these devices are EOL and no patches will be released, immediately isolate the affected devices from the internet or replace them with supported models

[Affected Scope] Ivanti Cloud Services Appliance (CSA) versions 4.6 Patch 518 and prior

[Impact] A remote authenticated attacker with admin-level privileges can inject arbitrary OS commands, leading to remote code execution and full system compromise

[Mitigation] Immediately upgrade to the supported Ivanti CSA 5.0 version or apply the latest security patches to mitigate active exploitation risks

[Affected Scope] FXC AE1021PE firmware version 2.0.9 and earlier, and AE1021 firmware version 2.0.9 and earlier

[Impact] An authenticated attacker can execute arbitrary OS commands with root privileges, potentially leading to full device takeover and botnet recruitment

[Mitigation] Immediately apply the official firmware patch (v2.0.10 or later) and restrict access to the management interface

[Affected Scope] D-Link DIR-820L router with firmware version DIR820LA1_FW105B03 and prior

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges via a crafted HTTP request

[Mitigation] Since this product is End-of-Life (EOL), immediate hardware replacement is highly recommended; otherwise, disable remote management and restrict access

[Affected Scope] Reolink RLC-410W smart IP camera firmware version v3.0.0.136_20121102 and prior

[Impact] An authenticated attacker can execute arbitrary OS commands with root privileges by sending a crafted HTTP request, leading to complete device compromise

[Mitigation] Immediately update to the latest official secure firmware and restrict external access to the camera management interface

[Affected Scope] Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W devices running firmware versions up to and including 1.0.227.

[Impact] An authenticated administrator can inject and execute arbitrary OS commands with root privileges via shell metacharacters in the 'addr1' field of the 'TestEmail' functionality.

[Mitigation] Immediately upgrade to the latest official firmware provided by the manufacturer and restrict network access to the camera's management interface.