CVE-2025-70518

CVSS 3.1: 10.0 critical
EPSS: —
Published: Oct 7, 2026 · 23d ago
Modified: Oct 7, 2026

Analyze CVE-2025-70518 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows any unauthenticated attacker to inject commands and run code in the underlying Android operating system.

Weakness: CWE-77

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (—)

In the news

0 stories

No ingested article mentions this CVE yet.