CVE-2025-26055

MEDIUM

Infinxt iEdge 100 <2.1.32 - Command Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2025-26055. PoCs published by rohan-pt.

AI-analyzed exploit summary This repository provides a writeup for CVE-2025-26055, detailing an OS command injection vulnerability in an unspecified web application. The PoC describes a method to exploit the vulnerability via a specific endpoint and payload, but no actual exploit code is included.

Description

An OS Command Injection vulnerability exists in the Infinxt iEdge 100 2.1.32 Troubleshoot module, specifically in the tracertVal parameter of the Tracert function.

Exploits (1)

nomisec WRITEUP
by rohan-pt · poc
https://github.com/rohan-pt/CVE-2025-26055

This repository provides a writeup for CVE-2025-26055, detailing an OS command injection vulnerability in an unspecified web application. The PoC describes a method to exploit the vulnerability via a specific endpoint and payload, but no actual exploit code is included.

Classification
Writeup 80%
Attack Type
Rce
Complexity
Moderate
Reliability
Theoretical
Target: unspecified web application
Auth required
Prerequisites: access to the vulnerable endpoint · authentication credentials
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1
Core References

Scores

CVSS v3 6.5
EPSS 0.0107
EPSS Percentile 60.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact total

Details

CWE
CWE-78
Status published
Published Apr 01, 2025
Tracked Since Feb 18, 2026