Volerion logoVolerion
Volerion logoVolerion

Nozomi Networks Waterfall WF-500 RX Host OS Command Injection Vulnerability

Vulnerability

A command injection vulnerability has been identified in the Administration WebUI of Nozomi Networks Waterfall WF-500 RX Host, specifically in version 7.9.1.0 R2502171040. This vulnerability, categorized as CWE-78, allows remote authenticated attackers to execute arbitrary operating system commands on the affected host.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of operating system commands on the WF-500 RX Host.

Added: May 29, 2026, 12:20 PM
Updated: May 29, 2026, 12:20 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
7.5
exploitability
5.2
remediation
0.0
relevance
9.8
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.