Vulnerability · Published Jun 26, 2026 · Assigned by trellix
CVE-2025-7958
High 7.1
In plain English
A high-severity code injection in Trellix Network Security NX, EX, FX, AX, and CMS from Trellix. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 24% of all known vulnerabilities).
Severity (CVSS 4.0)7.1High
Exploit odds (30 days)0.3%top 76.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web interface and Alert artifact details.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Trellix | Trellix Network Security NX, EX, FX, AX, and CMS | 10.0.4 |
Weakness: CWE-94 · Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P