CVE-2025-41673

A high privileged remote attacker can execute arbitrary system commands via POST requests in the send_sms action due to improper neutralization of special elements used in an OS command.

Assigner : info@cert.vde.com

More information : https://certvde.com/de/advisories/VDE-2025-058