https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T11:34:11.352606+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-34187 CVE-2025-34187 — Ilevia EVE X1/X5 Server 4.7.18.0.eden Reverse Rootshell 2026-10-09T11:34:11.368958+00:00

Affected: Ilevia Srl. EVE X1/X5 Server

Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a misconfiguration in the sudoers file that allows passwordless execution of certain Bash scripts. If these scripts are writable by web-facing users or accessible via command injection, attackers can replace them with malicious payloads. Execution with sudo grants full root access, resulting in remote privilege escalation and potential system compromise.