Critical Alert 1 Active Exploit Detected Today

CVE-2026-18577 — N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability →
Powered by CVE Watchtower
×
August 4, 2026

CVE Watchtower


← Back to CVE List

CVE-2025-10265NVD

Vulnerability Summary

Certain models of NVR developed by Digiever has an OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the device.
Severity Level
HIGH(8.7)
Published Date
Sep 12, 2025
Last Modified
Sep 15, 2025
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
CWE-78: OS Command Injection ↗
The software constructs all or part of an OS command using externally-influenced input, but does not properly neutralize special elements.
CVSS v4.0 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone

External References