CVE-2025-11673

SOOP-CLM developed by PiExtract has a Hidden Functionality vulnerability, allowing privileged remote attackers to exploit a hidden functionality to execute arbitrary code on the server.

Scoring

Severity

HIGH

CVSS base score

8.6

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

EPSS probability

0.54%

CWE

CWE-912

Published

2025-10-13

Last modified

2026-03-12

Affected products

• PiExtract SOOP-CLM
• PiExtract SOOP-CLM

Weakness type

• CWE-912

Related vulnerabilities

• CVE-2026-18844 — Pulsetto Vagus Nerve Stimulator Hidden Functionality
• CVE-2026-61515 — Puwell IP Camera 2.x - 4.x Unauthenticated Command Injection via DebugShell
• CVE-2026-18191 — Vacron｜IP Camera - Hidden Functionality
• CVE-2026-4769 — Unauthenticated Access to Internal Diagnostic Interface
• CVE-2026-7413 — Persistent undocumented backdoor access in Yarbo robot
• CVE-2026-41446 — WattBox 800 & 820 Series < 2.10.0.0 RCE via Diagnostic Endpoints
• CVE-2026-1952 — Denial of service via the undocumented subfunction in AS320T
• CVE-2026-34769 — Electron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference

Markdown version · Browse all CVEs