CVE-2025-29331 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An issue in MHSanaei 3x-ui before v.2.5.3 and before allows a remote attacker to execute arbitrary code via the management script x-ui passes the no check certi…
Critical CVSS: 9.8

CVE-2025-29331

An issue in MHSanaei 3x-ui before v.2.5.3 and before allows a remote attacker to execute arbitrary code via the management script x-ui passes the no check certificate option to wget when downloading updates
Vendor
Mhsanaei
Product
3x-ui
CWE
CWE-295
Yayın Tarihi
2025-06-26 15:15:22
Güncelleme
2025-07-10 14:49:40
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-295 3x-ui CRITICAL Mhsanaei 2025

Referanslar

https://github.com/MHSanaei/3x-ui/pull/2661 https://www.digilol.net/security-advisories/dlsec2025-001.html