VULNERABILITY INTELLIGENCE
CVE-2025-7958
EPSS probability0.31%
CISA KEVNot currently listed
Published2026-06-26
Last modified2026-09-29
Description
A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web interface and Alert artifact details.
Weakness classification
- trellixpsirt@trellix.com: CWE-94