Vulnerability index

Browse CVEs

17 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Wf 500 Firmware CRITICAL 9.8
CVE-2025-41276

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console W…

Fix: after 7.9.1.0_r2502171040
Fix from $2,300 2026-05-29
Wf 500 Firmware CRITICAL 9.8
CVE-2025-41277

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console W…

Fix: after 7.9.1.0_r2502171040
Fix from $2,300 2026-05-29
Wf 500 Firmware HIGH 7.8
CVE-2025-41278

Nozomi Networks Labs identified a CWE-125: Out-of-bounds Read in Waterfall WF-500 RX Host in version 7.10.0.0 R2601141040 that allows attackers with …

Fix: after 7.9.1.0_r2502171040
Fix from $1,950 2026-05-29
Wf 500 Firmware HIGH 7.8
CVE-2025-41280

Nozomi Networks Labs identified a CWE-23: Relative Path Traversal (Zip Slip) in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that allows a…

Fix: after 7.9.1.0_r2502171040
Fix from $1,950 2026-05-29
Wf 500 Firmware HIGH 7.8
CVE-2025-41281

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Waterfall WF-…

Fix: after 7.9.1.0_r2502171040
Fix from $1,950 2026-05-29
Wf 500 Firmware HIGH 7.2
CVE-2025-41279

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administr…

Fix: after 7.9.1.0_r2502171040
Fix from $1,950 2026-05-29
Wf 500 Firmware CRITICAL 9.8
CVE-2025-41269

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console W…

Fix: after 7.9.1.0_r2502171040
Fix from $2,300 2026-05-29
Wf 500 Firmware CRITICAL 9.8
CVE-2025-41270

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console W…

Fix: after 7.9.1.0_r2502171040
Fix from $2,300 2026-05-29
Wf 500 Firmware CRITICAL 9.8
CVE-2025-41272

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console W…

Fix: after 7.9.1.0_r2502171040
Fix from $2,300 2026-05-29
Wf 500 Firmware CRITICAL 9.8
CVE-2025-41273

Nozomi Networks Labs identified a CWE-288: Authentication Bypass Using an Alternate Path or Channel in the Console WebUI in Waterfall WF-500 TX and R…

Fix: after 7.9.1.0_r2502171040
Fix from $2,300 2026-05-29
Wf 500 Firmware CRITICAL 9.8
CVE-2025-41274

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console W…

Fix: after 7.9.1.0_r2502171040
Fix from $2,300 2026-05-29
Wf 500 Firmware CRITICAL 9.8
CVE-2025-41275

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console W…

Fix: after 7.9.1.0_r2502171040
Fix from $2,300 2026-05-29
Wf 500 Firmware CRITICAL 9.1
CVE-2025-41268

Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Administration WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 …

Fix: after 7.9.1.0_r2502171040
Fix from $2,300 2026-05-29
Wf 500 Firmware HIGH 7.5
CVE-2025-41271

Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R250217…

Fix: after 7.9.1.0_r2502171040
Fix from $1,950 2026-05-29
Wf 500 Firmware HIGH 7.2
CVE-2025-41266

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administr…

Fix: after 7.9.1.0_r2502171040
Fix from $1,950 2026-05-29
Wf 500 Firmware HIGH 7.2
CVE-2025-41267

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administr…

Fix: after 7.9.1.0_r2502171040
Fix from $1,950 2026-05-29
Wf 500 Firmware HIGH 7.2
CVE-2025-41265

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administr…

Fix: after 7.9.1.0_r2502171040
Fix from $1,950 2026-05-29