Post-Authentication OS Command Injection RCE in Danfoss AK-SM8xxA Series
Not on CISA's list of exploited flaws, and not in the news we track.
4.5%
Fix it in your code
Each opens with a short prompt that points at Global Hack Map's public runbook for CVE-2025-41451. Nothing runs until you send it.
Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command ('Command Injection') in Danfoss AK-SM8xxA Series prior to version 4.3.1, leading to a potential post-authenticated remote code execution on an attacked system.