TI-2025-34146 CVE-2025-54322 · GHSA-2qm6-vprh-vgfc
Code injection in Xspeeder SXZOS
Priority HIGH 82
Xspeeder SXZOS through 2025-12-26 allows root remote code execution via base64-encoded Python code in the chkid parameter to vLogin.py.
Xspeeder
Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Xspeeder records in CISA KEVNo Xspeeder vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
1 record