critical10.0
CVE-2025-54322
Xspeeder SXZOS through 2025-12-26 allows root remote code execution via base64-encoded Python code in the chkid parameter to vLogin.py.
Impact
Xspeeder SXZOS through 2025-12-26 allows root remote code execution via base64-encoded Python code in the chkid parameter to vLogin.py. The title and oIP parameters are also used.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xspeeder | Sxzos | through 2025-12-26 |