Security Advisory

CVE-2025-60738

9.8
CRITICAL

Vulnerability Description

An issue in Ilevia EVE X1 Server Firmware Version v4.7.18.0.eden and before Logic Version v6.00 - 2025_07_21 and before allows a remote attacker to execute arbitrary code via the ping.php component does not perform secure filtering on IP parameters
Published Date November 20, 2025
Official Source NIST NVD Advisory