7.1
High
CVE-2025-7958 A Code Injection vulnerability existed in Trellix Network Security CM and NX
Description
A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web interface and Alert artifact details.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Trellix Network Security NX, EX, FX, AX, and CMS | 10.0.4 | No fix stated |