CVE-2025-50123CWE-94

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote command execution by a privileged account…

High · published July 11, 2025

CVSS v4.0
7.2
EPSS
0%
Percentile
31.1
In the wild
Unconfirmed
What it is

A

CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote

command execution by a privileged account when the server is accessed via a console and through

exploitation of the hostname input.

The record
Technical detail
CVSS v4.0
7.2 · HIGH
Vector
CVSS:4.0/AV:P/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:L/SA:H
EPSS
0.00383 · 31.1th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2025-07-11T10:08Z
EPSS history
Timeline
  • 11 JUL 10:08Z
    A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote command execution by a privileged account…
    cvelistv5