ICTBroadcast vulnerabilities

CVEs whose affected-version data names the ICTBroadcast package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-2611Critical· 9.3PoC

1y ago

ICTBroadcast <= 7.4 Unauthenticated Session Cookie RCE

The ICTBroadcast application unsafely passes session cookie data to shell processing, allowing an attacker to inject shell commands into a session cookie that get executed on the server. This results in unauthenticated remote code execut…

▾ AbyssalICT Innovations · ICTBroadcastEPSS 8.4%via CVEORG