What’s Vulnerable › Vulnerabilities
CVE-2025-14213: Cato's Socket WebUI is vulnerable to OS Command Injection
- Severity: high (CVSS 8.3 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.0% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-03-31 · updated 2026-07-25
- Weakness: CWE-20
Description
Cato Networks’ Socket versions prior to 25 contain a command injection vulnerability that allows an authenticated attacker with access to the Socket web interface (UI) to execute arbitrary operating system commands as the root user on the Socket’s internal system.
Affected products
- Cato Networks Socket: through 24
References
Get alerted when CVE-2025-14213 or the next vulnerability affects your stack