What is CVE-2025-26056?

CVE-2025-26056 is a medium-severity vulnerability in N/a, classified under Command Injection. CVSS score: 5.4/10. Published 2025-04-01.

How severe is CVE-2025-26056?

Medium severity. CVSS v3 base score is 5.4 out of 10.

Is CVE-2025-26056 known to be exploited?

3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

RCE in N/a

CVE-2025-26056

A command injection vulnerability exists in the Infinxt iEdge 100 2.1.32 in the Troubleshoot module "MTR" functionality. The vulnerability is due to improper validation of user-supplied input in the mtrIp parameter. An attacker can exploit this flaw to execute arbitrary operating system commands on the underlying system with the same privileges as the web application process.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.010 (60.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N.

Affected products

N/a — versions n/a

Weakness classification (CWE)

CWE-77 — Command Injection

Public proof-of-concept exploits

References

cve@mitre.org

Frequently asked questions

What is CVE-2025-26056?: CVE-2025-26056 is a medium-severity vulnerability in N/a, classified under Command Injection. CVSS score: 5.4/10. Published 2025-04-01.
How severe is CVE-2025-26056?: Medium severity. CVSS v3 base score is 5.4 out of 10.
Is CVE-2025-26056 known to be exploited?: 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.