CVE-2025-7958_CVE-2025-7958

7.1 / 10

HIGH

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

Description

A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web interface and Alert artifact details.

Basic Information

ID CVE-2025-7958

Source trellix

Published Jun 26, 2026 at 10:15

Affected Product

Vendor Trellix

Product Trellix Network Security NX, EX, FX, AX, and CMS

Version 10.0.4

Affected Versions Trellix Trellix Network Security NX, EX, FX, AX, and CMS 10.0.4

CWE Classification

CWE-94

References

support.trellix.com /s/article/000015433

{
    "lastseen": "",
    "description": "A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web interface and Alert artifact details.",
    "published": "2026-06-26T10:15:00.787Z",
    "modified": "2026-06-26T10:15:00.787Z",
    "type": "cve",
    "title": "CVE-2025-7958",
    "source": "trellix",
    "references": "https://support.trellix.com/s/article/000015433",
    "id": "CVE-2025-7958",
    "bulletinFamily": "",
    "cwe": [
        "CWE-94"
    ],
    "cvelist": null,
    "sourceData": "Trellix Trellix Network Security NX, EX, FX, AX, and CMS 10.0.4",
    "sourceHref": "",
    "cvss": {
        "score": 7.1,
        "severity": "HIGH",
        "vector": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Trellix Network Security NX, EX, FX, AX, and CMS",
    "version": "10.0.4",
    "vendor": "Trellix",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}