Read the docs

Waterfall

Records17All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

Waterfall records in CISA KEV

No Waterfall vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

17 records

TI-2025-27518 CVE-2025-41277 · GHSA-8j22-33w4-9cm2

OS command injection in Waterfall WF-500

Priority MEDIUM 51

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0138 Published 2026-05-29 No fix listed CWE-78
TI-2025-27517 CVE-2025-41276 · GHSA-w3pq-9jqc-2q4g

OS command injection in Waterfall WF-500

Priority MEDIUM 51

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0138 Published 2026-05-29 No fix listed CWE-78
TI-2025-27516 CVE-2025-41275 · GHSA-x8xj-254q-5cfr

OS command injection in Waterfall WF-500

Priority MEDIUM 51

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0138 Published 2026-05-29 No fix listed CWE-78
TI-2025-27515 CVE-2025-41274 · GHSA-594v-jprj-pjx7

OS command injection in Waterfall WF-500

Priority MEDIUM 51

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0138 Published 2026-05-29 No fix listed CWE-78
TI-2025-27513 CVE-2025-41272 · GHSA-2cvv-gpr6-mr7q

OS command injection in Waterfall WF-500

Priority MEDIUM 51

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0138 Published 2026-05-29 No fix listed CWE-78
TI-2025-27511 CVE-2025-41270 · GHSA-2r2p-h7w3-fpw7

OS command injection in Waterfall WF-500

Priority MEDIUM 51

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0138 Published 2026-05-29 No fix listed CWE-78
TI-2025-27510 CVE-2025-41269 · GHSA-5wvf-5xh4-3whx

OS command injection in Waterfall WF-500

Priority MEDIUM 51

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0138 Published 2026-05-29 No fix listed CWE-78
TI-2025-27514 CVE-2025-41273 · GHSA-7gp3-r9h9-v4j9

Authentication bypass in Waterfall WF-500

Priority MEDIUM 48

Nozomi Networks Labs identified a CWE-288: Authentication Bypass Using an Alternate Path or Channel in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticat…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00407 Published 2026-05-29 No fix listed CWE-288
TI-2025-27509 CVE-2025-41268 · GHSA-9w3c-478w-64gj

Path traversal in Waterfall WF-500

Priority MEDIUM 46

Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Administration WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to delete arbi…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00437 Published 2026-05-29 No fix listed CWE-23
TI-2025-27512 CVE-2025-41271 · GHSA-8jh5-3w8c-rv2j

Path traversal in Waterfall WF-500

Priority MEDIUM 44

Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to read arbitrary fil…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00434 Published 2026-05-29 No fix listed CWE-23
TI-2025-27520 CVE-2025-41279 · GHSA-mx9m-xgqf-hmqr

OS command injection in Waterfall WF-500

Priority MEDIUM 41

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040…

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00882 Published 2026-05-29 No fix listed CWE-78
TI-2025-27508 CVE-2025-41267 · GHSA-53qr-g9p4-6gqf

OS command injection in Waterfall WF-500

Priority MEDIUM 41

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 TX Host in version 7.9.1.0 R2502171040…

CVSS 4.0HIGH 8.5 Network High privileges User interaction EPSS 0.00882 Published 2026-05-29 No fix listed CWE-78
TI-2025-27507 CVE-2025-41266 · GHSA-865q-qqwj-gwm3

OS command injection in Waterfall WF-500

Priority MEDIUM 41

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 TX Host in version 7.9.1.0 R2502171040…

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00882 Published 2026-05-29 No fix listed CWE-78
TI-2025-27506 CVE-2025-41265 · GHSA-qq7f-qfjw-fj9f

OS command injection in Waterfall WF-500

Priority MEDIUM 41

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 TX Host in version 7.9.1.0 R2502171040…

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00882 Published 2026-05-29 No fix listed CWE-78
TI-2025-27522 CVE-2025-41281 · GHSA-xrgm-w999-2hpq

OS command injection in Waterfall WF-500

Priority LOW 35

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that allows attackers with a…

CVSS 4.0HIGH 7.5 Local No auth No interaction EPSS 0.00505 Published 2026-05-29 No fix listed CWE-78
TI-2025-27521 CVE-2025-41280 · GHSA-cf86-3f4j-57g9

Path traversal in Waterfall WF-500

Priority LOW 34

Nozomi Networks Labs identified a CWE-23: Relative Path Traversal (Zip Slip) in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that allows attackers with access to the TX Host to execute code on the RX Host when…

CVSS 4.0HIGH 7.5 Local No auth No interaction EPSS 0.00146 Published 2026-05-29 No fix listed CWE-23
TI-2025-27519 CVE-2025-41278 · GHSA-68g4-7798-227f

Out-of-bounds read in Waterfall WF-500

Priority LOW 34

Nozomi Networks Labs identified a CWE-125: Out-of-bounds Read in Waterfall WF-500 RX Host in version 7.10.0.0 R2601141040 that allows attackers with access to the TX Host to execute code on the RX Host.

CVSS 4.0HIGH 7.5 Local No auth No interaction EPSS 0.0012 Published 2026-05-29 No fix listed CWE-125
Open these records in search →