CVE-2025-23239

Summary

CVE-2025-23239 is a remote command injection vulnerability affecting an undisclosed iControl REST endpoint when the software is run in Appliance mode. Successful exploitation can enable an attacker to cross a security boundary and gain unauthorized access to the system. Importantly, this vulnerability exists only in versions of the software that are still receiving technical support.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.