CVE-2025-48501

Critical CVSS: 9.3

An OS command injection issue exists in Nimesa Backup and Recovery v2.3 and v2.4. If this vulnerability is exploited, an arbitrary OS commands may be executed on the server where the product is running.

Vendor

Product

CWE

CWE-78

Yayın Tarihi

2025-07-07 05:15:41

Güncelleme

2025-07-08 16:18:34

Source Identifier

vultures@jpcert.or.jp

KEV Date Added

Kategoriler

CWE-78 CRITICAL 2025

Referanslar

https://aws.amazon.com/marketplace/seller-profile?id=08fb48d1-5d60-4feb-93c6-c0c219278a2c https://jvn.jp/en/jp/JVN88251376/