CVE-2026-25817

HMS Networks Ewon Flexy 15.0s4 dan oldin dasturiy ta'minot bilan, Cosy+ 22.1s6 dan oldin 22.xx dasturiy ta'minot bilan va Cosy+ 23.0s3 dan oldin 23.xx dasturiy ta'minot bilan operatsion tizim buyrug'ida ishlatiladigan maxsus elementlarni noto'g'ri neytrallashtirishga ega, bu esa hujumchining hisob ma'lumotlari mavjud bo'lsa, shlyuzda past imtiyozli kirish huquqiga ega bo'lgan hujumchilar tomonidan masofadan kodni bajarishga imkon beradi.

CVSS Vector

Manbalar

• https://hmsnetworks.blob.core.windows.net/nlw/docs/default-source/products/cybersecurity/security-advisory/hms-security-advisory-2026-03-09-001---ewon-several-flexy-and-cosy--vulnerabilities.pdf?sfvrsn=f7c027b8_13
• https://www.hms-networks.com/p/flexy20500-00ma-ewon-flexy-205