CVE-2025-34184 – Ilevia EVE X1 Server 4.7.18.0.eden Neuro-Core Unauthenticated Code Injection

CVE ID : CVE-2025-34184

Published : Sept. 16, 2025, 8:15 p.m. | 42 minutes ago

Description : Ilevia EVE X1 Server version ≤ 4.7.18.0.eden contains an unauthenticated OS command injection vulnerability in the /ajax/php/login.php script. Remote attackers can execute arbitrary system commands by injecting payloads into the ‘passwd’ HTTP POST parameter, leading to full system compromise or denial of service.

Severity: 9.3 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…