Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
NetGain EM Plus 10.1.68 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious parameters to the script_test.jsp endpoint. Attackers can send POST requests with shell commands embedded in the 'content' parameter to execute code and retrieve command output.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-03-11 | 2 | Disclosure1Exploit1 |
| 2026-03-12 | 1 | Disclosure1 |
CVE-2019-25468 NetGain EM Plus 10.1.68 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malici… https://www.cve.org/CVERecord?id=CVE-2019-25468
Post summary
The post reports CVE-2019-25468 as a remote code execution vulnerability in NetGain EM Plus 10.1.68, giving basic technical details but no PoC, exploitation status, or patch information.
[CVE-2019-25468: CRITICAL] Vulnerability in NetGain EM Plus 10.1.68 allows remote code execution via script_test.jsp endpoint. Attackers can run system commands using malicious parameters.#cve,CVE-2019-25468,#cybersecurity https://cvefind.com/CVE-2019-25468
Post summary
The post announces a critical RCE vulnerability in NetGain EM Plus 10.1.68, detailing the attack path but providing no PoC, exploit code, or patch information.
🚨 CVE-2019-25468: NetGain... Unauthenticated RCE via script_test.jsp with a public exploit - NetGain EM Plus boxes are sitting ducks for instant shell access. #RCE #NetGain. https://zerodaysignal.com/vulnerability/CVE-2019-25468 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The post announces a publicly available, unauthenticated RCE vulnerability (CVE‑2019‑25468) in NetGain EM Plus, providing a link to a public exploit but no patch or evidence of active targeted attacks.