CVE-2025-34186 | BDVDB-2026-294144 Detail

Description#

Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a vulnerability in its authentication mechanism. Unsanitized input is passed to a system() call for authentication, allowing attackers to inject special characters and manipulate command parsing. Because the binary interprets non-zero exit codes from system() as successful authentication, remote attackers can bypass authentication and gain full access to the system.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12025-09-16Record published in the CVE List.
2. Version 22026-05-26Most recent update recorded in the CVE List.