CVE-2025-63218 - Axel Technology WOLF1MS and WOLF2MS Unauthenticated Remote Command Execution and...

CVE ID : CVE-2025-63218 Published : Nov. 19, 2025, 3:15 p.m. | 34 minutes ago Description : The Axel Technology WOLF1MS and WOLF2MS devices (firmware versions 0.8.5 to 1.0.3) are vulnerable to Broken Access Control due to missing authentication on the /cgi-bin/gstFcgi.fcgi endpoint. Unauthenticated remote attackers can list user accounts, create new administrative users, delete users, and modify system settings, leading to full compromise of the device. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...