Vulnerability Database

309,136

Total vulnerabilities in the database

CVE-2025-50121

A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause unauthenticated remote code execution when a malicious folder is created over the web interface HTTP when enabled. HTTP is disabled by default.

No technical information available.

CWEs:

OWASP TOP 10: