Vulnerability Description
Vulnerable endpoints accept user-controlled input through a URL in JSON format which enables command execution. The commands allowed to execute can open executables. However, the commands cannot pass parameters or arguments. To successfully execute this attack, the attacker needs to be on the same network.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2025-11571?
CVE-2025-11571 is a documented vulnerability. Vulnerable endpoints accept user-controlled input through a URL in JSON format which enables command execution. The commands allowed to execute can open executables. However, the commands cannot pass ...
How severe is CVE-2025-11571?
CVSS scoring is not yet available for CVE-2025-11571. Check NVD for updates.
Is there a patch for CVE-2025-11571?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.