CVE-2025-40948Medium· 6.8▾ SunlitA vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1), RUGGEDCOM ROX RX1500 (All versions < V2.17.1), RUGGEDCO…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 37.4 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 30.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.4%
Last analysed / modified upstream
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1), RUGGEDCOM ROX RX1500 (All versions < V2.17.1), RUGGEDCOM ROX RX1501 (All versions < V2.17.1), RUGGEDCOM ROX RX1510 (All versions < V2.17.1), RUGGEDCOM ROX RX1511 (All versions < V2.17.1), RUGGEDCOM ROX RX1512 (All versions < V2.17.1), RUGGEDCOM ROX RX1524 (All versions < V2.17.1), RUGGEDCOM ROX RX1536 (All versions < V2.17.1), RUGGEDCOM ROX RX5000 (All versions < V2.17.1). Affected devices do not properly validate input in the web server's JSON-RPC interface.
This could allow an authenticated remote attacker to read arbitrary files from the underlying operating system's filesystem with root privileges.
ruggedcom_rox_mx5000_firmware < 2.17.1ruggedcom_rox_mx5000re_firmware < 2.17.1ruggedcom_rox_rx1400_firmware < 2.17.1ruggedcom_rox_rx1500_firmware < 2.17.1ruggedcom_rox_rx1501_firmware < 2.17.1ruggedcom_rox_rx1510_firmware < 2.17.1ruggedcom_rox_rx1511_firmware < 2.17.1ruggedcom_rox_rx1512_firmware < 2.17.1ruggedcom_rox_rx1524_firmware < 2.17.1ruggedcom_rox_rx1536_firmware < 2.17.1ruggedcom_rox_rx5000_firmware < 2.17.1Upgrade past the affected range:
ruggedcom_rox_mx5000_firmware 2.17.1ruggedcom_rox_mx5000re_firmware 2.17.1ruggedcom_rox_rx1400_firmware 2.17.1ruggedcom_rox_rx1500_firmware 2.17.1ruggedcom_rox_rx1501_firmware 2.17.1ruggedcom_rox_rx1510_firmware 2.17.1ruggedcom_rox_rx1511_firmware 2.17.1ruggedcom_rox_rx1512_firmware 2.17.1ruggedcom_rox_rx1524_firmware 2.17.1ruggedcom_rox_rx1536_firmware 2.17.1ruggedcom_rox_rx5000_firmware 2.17.1Connected by shared product, vendor, weakness, or advisory.
CVE-2025-40949Critical· 9.1A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1), RUGGEDCOM ROX RX1500 (All versions < V2.17.1), RUGGEDCO…
CVE-2025-40947High· 7.5A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1), RUGGEDCOM ROX RX1500 (All versions < V2.17.1), RUGGEDCO…
CVE-2025-59937Critical· 9.1go-mail is a comprehensive library for sending mails with Go
CVE-2026-89209Medium· 6.8A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 11 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 9 compatible) (All versions < V3.6.29)
CVE-2026-110936Medium· 6.7A vulnerability has been identified in Siemens Software Center (All versions)
CVE-2024-49894High· 7.1In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in degamma hardware format translation Fixes index out of bounds issue in `cm_helper_translate_curve_to_degamma_hw_format` fun…