PT-2025-49847 · Panilux · Panilux

Published 2025-12-09 · Updated 2025-12-14 · CVE-2025-11022

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Panilux versions prior to 0.10.0

Description A Cross-Site Request Forgery (CSRF) issue exists in Panilux, potentially leading to Command Injection. The vendor has denied ownership of the product.

Recommendations Update to version 0.10.0.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2025-11022

Affected Products

Panilux

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-11022 · Security Note
• https://twitter.com/CveFindCom/status/1998433385354559624 · Twitter Post
• https://twitter.com/cracbot/status/2000158888147231006 · Twitter Post
• https://usom.gov.tr/bildirim/tr-25-0433 · Note