VULNERABILITY INTELLIGENCE

CVE-2025-9996

CVSS score5.8 MEDIUM

EPSS probability0.52%

CISA KEVNot currently listed

Published2025-09-09

Last modified2026-10-18

Description

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause the execution of any shell command when executing a netstat command using BLMon Console in an SSH session.