waterfall-security vulnerabilities

Recent CVEs affecting waterfall-security products. 17 tracked.

waterfall-security has 17 tracked vulnerabilities, 9 critical. A fixed release or vendor patch exists for 17. Most recent: 2026-05-29. Highest priority: CVE-2025-41269 (score 60/100).

• CVE-2025-41269 CRITICAL 9.8 UPGRADE Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('
• CVE-2025-41270 CRITICAL 9.8 UPGRADE Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('
• CVE-2025-41272 CRITICAL 9.8 UPGRADE Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('
• CVE-2025-41274 CRITICAL 9.8 UPGRADE Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('
• CVE-2025-41275 CRITICAL 9.8 UPGRADE Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('
• CVE-2025-41276 CRITICAL 9.8 UPGRADE Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('
• CVE-2025-41277 CRITICAL 9.8 UPGRADE Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('
• CVE-2025-41273 CRITICAL 9.8 UPGRADE Nozomi Networks Labs identified a CWE-288: Authentication Bypass Using an Alternate Path or Channel in the Con
• CVE-2025-41268 CRITICAL 9.1 UPGRADE Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Administration WebUI in Waterfall WF-
• CVE-2025-41271 HIGH 7.5 UPGRADE Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Console WebUI in Waterfall WF-500 TX
• CVE-2025-41265 HIGH 7.2 UPGRADE Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('
• CVE-2025-41266 HIGH 7.2 UPGRADE Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('
• CVE-2025-41267 HIGH 7.2 UPGRADE Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('
• CVE-2025-41279 HIGH 7.2 UPGRADE Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('
• CVE-2025-41281 HIGH 7.8 UPGRADE Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('
• CVE-2025-41278 HIGH 7.8 UPGRADE Nozomi Networks Labs identified a CWE-125: Out-of-bounds Read in Waterfall WF-500 RX Host in version 7.10.0.0
• CVE-2025-41280 HIGH 7.8 UPGRADE Nozomi Networks Labs identified a CWE-23: Relative Path Traversal (Zip Slip) in Waterfall WF-500 RX Host in ve

FAQ

How do I fix waterfall-security vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is waterfall-security being exploited right now?

None of the tracked waterfall-security CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which waterfall-security CVE should I patch first?

CVE-2025-41269 currently ranks highest (60/100): Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('.

Products

• wf-500 firmware

RSS feed for waterfall-security · ← Back to latest CVEs