CoreCVE
Back

CRITICAL

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to execute arbitrary operating system commands on the device

Published May 29, 2026

Description

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to execute arbitrary operating system commands on the device.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner Nozomi
Published May 29, 2026
Updated May 29, 2026
Reserved Apr 16, 2025
Link CVE-2025-41275

CISA Vulnrichment

Updated May 29, 2026

NVD

Status Analyzed
Modified Jul 21, 2026
Link CVE-2025-41275

Red Hat

No data

ENISA EUVD

Assigner Nozomi
Published May 29, 2026
Updated May 29, 2026
Link EUVD-2025-209995

GitHub

No data