RCE in Trellix Network Security Nx, Ex, Fx, Ax, And Cms

CVE-2025-7958

A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web interface and Alert artifact details.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.002 (9.7th percentile) — read the EPSS interpretation.