עברית

Vulnerability Intelligence

CVE-2025-37146

High 7.2

Published
Last modified
NVD status
Deferred

Description

A vulnerability in the web-based management interface of network access point configuration services could allow an authenticated remote attacker to perform remote command execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

References1

Metrics

CVSS 3.1
7.2 HIGH Score source: CNA CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS — exploit probability
1% percentile: 60 · as of 9 November 2026
CWE
CWE-77

Could this be exploited in your environment?

A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.