PT-2026-7625 · Pacom · Pacom Unison Client

CVE-2025-65480 · Publicado 2026-02-11 · Atualizado 2026-02-11

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Pacom Unison Client version 5.13.1

Description An issue exists in Pacom Unison Client where authenticated users can inject malicious scripts into Report Templates. These scripts are executed when specific script conditions are met, potentially leading to Remote Code Execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2025-65480

Produtos afetados

Pacom Unison Client

Referências · 4

• 🔥 https://github.com/derekyjj/vulnerability-research/tree/main/CVE-2025-65480 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-65480 · Nota de Segurança
• https://t.me/CVEtracker/44446 · Publicação no Telegram
• http://pacom.com · Nota