CVE-2025-60739 Cross-site request forgery in n/a
A CSRF vulnerability in EVE X1 Server Firmware allows remote attackers to execute arbitrary code via the web backend component.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2025-60739?
CVE-2025-60739 is a critical vulnerability in n/a, published on 25 Nov 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Cross Site Request Forgery (CSRF) vulnerability in Ilevia EVE X1 Server Firmware Version v4.7.18.0.eden and before, Logic Version v6.00 - 2025_07_21 allows a remote attacker to execute arbitrary code via the /bh_web_backend component
Which versions are affected by CVE-2025-60739?
It affects 1 product.
Products include Ilevia Eve X1 Server Firmware.
How do I fix CVE-2025-60739?
No fix has been published for CVE-2025-60739 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-60739 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-60739 exists.
Other vulnerabilities in n/a
- CVE-2025-60738 Command injection in n/a
- CVE-2025-34513 Ilevia EVE X1 Server 4.7.18.0.eden Unauthenticated Command Injection
- CVE-2025-34515 Ilevia EVE X1 Server 4.7.18.0.eden Root Privilege Escalation
- CVE-2025-34516 Ilevia EVE X1 Server 4.7.18.0.eden Use of Default Credentials
- CVE-2025-34183 Ilevia EVE X1 Server 4.7.18.0.eden Credentials Leak Through Log Disclosure
Sources
Also known as GHSA-gqwg-v25f-563v.