CVE-2025-7958
Remote Code Execution via Web Interface on Trellix Network Security CM and NX
A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web interface and Alert artifact details.
CVSS 4.0 · 7.1 High
EPSS < 1%
KEV · Not listed
Vendors
Products