CVE-2025-2611 – ICTBroadcast Unauthenticated Remote Code Execution

CVE ID : CVE-2025-2611

Published : Aug. 5, 2025, 3:15 p.m. | 29 minutes ago

Description : The ICTBroadcast application unsafely passes session cookie data to shell processing, allowing an attacker to inject shell commands into a session cookie that get executed on the server. This results in unauthenticated remote code execution in the session handling.

Versions 7.4 and below are known to be vulnerable.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…