CVE-2025-52379 – Nexxt Solutions NCM-X1800 Mesh Router Remote Command Injection Vulnerability

July 15, 2025

CVE ID : CVE-2025-52379

Published : July 15, 2025, 3:15 p.m. | 1 hour, 19 minutes ago

Description : Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and below contains an authenticated command injection vulnerability in the firmware update feature. The /web/um_fileName_set.cgi and /web/um_web_upgrade.cgi endpoints fail to properly sanitize the upgradeFileName parameter, allowing authenticated attackers to execute arbitrary OS commands on the device, resulting in remote code execution.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-53621 – DSpace XXE Injection Vulnerability

Next Article CVE-2025-6971 – SOLIDWORKS eDrawings After Free Vulnerability

Highlights

CVE-2025-5925 – WordPress Bunny’s Print CSS CSRF Vulnerability

June 10, 2025

CVE ID : CVE-2025-5925

Published : June 10, 2025, 4:15 a.m. | 1 hour, 27 minutes ago

Description : The Bunny’s Print CSS plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.95. This is due to missing or incorrect nonce validation on the pcss_options_subpanel() function. This makes it possible for unauthenticated attackers to update settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

Severity: 4.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

In-House vs Outsourcing for React.js Development: Understand What Is Best for Your Enterprise

Tiny Screens, Big Impact: The Forgotten Art Of Developing Web Apps For Feature Phones

Kong AI Gateway 3.11 introduces new method for reducing token costs

Native vs hybrid vs cross-platform: Resolving the trilemma

Microsoft’s AI CEO says Google nearly launched “ChatGPT” before OpenAI — but brutal skeptics, fears of disrupting search, and safety concerns thwarted the plan

You’ve got to try these 5 premium Minecraft add-ons — Dinosaurs, security systems, and more really shake up Bedrock Edition

This Microsoft pay scale reveals AI pros are making bank — with compensation packages reaching up to $336,000/year

ZeniMax QA testers face whiplash and “rancid” work morale following Microsoft’s gaming layoffs — but the union still fights

The details of TC39’s last meeting

The details of TC39’s last meeting

Vector Search Embeddings and RAG

Python Meets Power Automate: Trigger via URL

Microsoft’s AI CEO says Google nearly launched “ChatGPT” before OpenAI — but brutal skeptics, fears of disrupting search, and safety concerns thwarted the plan

Microsoft’s AI CEO says Google nearly launched “ChatGPT” before OpenAI — but brutal skeptics, fears of disrupting search, and safety concerns thwarted the plan

You’ve got to try these 5 premium Minecraft add-ons — Dinosaurs, security systems, and more really shake up Bedrock Edition

This Microsoft pay scale reveals AI pros are making bank — with compensation packages reaching up to $336,000/year

CVE-2025-52379 – Nexxt Solutions NCM-X1800 Mesh Router Remote Command Injection Vulnerability

Critical mcp-remote Vulnerability Enables Remote Code Execution, Impacting 437,000+ Downloads

CISA Adds Citrix NetScaler CVE-2025-5777 to KEV Catalog as Active Exploits Target Enterprises

EcoFlow’s newest portable A/C aims to save the day – but will it deliver?

CISA and FBI Warn Fast Flux is Powering Resilient Malware, C2, and Phishing Networks

CVE-2025-44019 – AVEVA PI Data Archive Denial of Service (DoS) Vulnerability

Critical ModSecurity WAF Vulnerability Allows Denial of Service via Empty XML Tags

CVE-2025-5925 – WordPress Bunny’s Print CSS CSRF Vulnerability

Accessing Blocked Content: Unblocking Pornhub in Tennessee

Enhancing JSON Responses with Laravel Model Appends

CVE-2025-4937 – SourceCodester Apartment Visitor Management System SQL Injection Vulnerability

CVE-2025-52379 – Nexxt Solutions NCM-X1800 Mesh Router Remote Command Injection Vulnerability

Related Posts