CVE-2025-62193 - NOAA PMEL Live Access Server (LAS) command injection

CVE ID : CVE-2025-62193 Published : Jan. 15, 2026, 5:16 p.m. | 49 minutes ago Description : Sites running NOAA PMEL Live Access Server (LAS) are vulnerable to remote code execution via specially crafted requests that include PyFerret expressions. By leveraging a SPAWN command, unauthenticated attackers can execute arbitrary OS commands. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor