Signal is active with 5 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
aelsantex runcommand 2014-04-01, a plugin for DokuWiki, allows unauthenticated attackers to execute arbitrary system commands via lib/plugins/runcommand/postaction.php.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2025-51958 avslöjar en kritisk sårbarhet i DokuWiki-plugin som tillåter obehöriga användare att exekvera godtyckliga kommandon. Måste åtgärdas omgående! #säkerhet #cybersäkerhet #CVE
Post summary
The post publicly discloses CVE-2025-51958, a critical arbitrary command execution flaw in a DokuWiki plugin, urging immediate remediation.
CVE-2025-51958 Unauthenticated Remote Command Execution in DokuWiki aelsantex Runcomman... https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-51958 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
The tweet announces CVE-2025-51958, describing unauthenticated remote command execution in DokuWiki, and provides links to vulnerability details but no proof of exploit or remediation information.
[CVE-2025-51958: CRITICAL] aelsantex runcommand 2014-04-01, a plugin for DokuWiki, allows unauthenticated attackers to execute arbitrary system commands via lib/plugins/runcommand/postaction.php.#cve,CVE-2025-51958,#cybersecurity https://cvefind.com/CVE-2025-51958
Post summary
The tweet announces that CVE-2025-51958 is a critical flaw in the aelsantex runcommand plugin for DokuWiki, allowing unauthenticated command execution through a specific file.
CVE-2025-51958 aelsantex runcommand 2014-04-01, a plugin for DokuWiki, allows unauthenticated attackers to execute arbitrary system commands via lib/plugins/runcommand/postaction.ph… https://www.cve.org/CVERecord?id=CVE-2025-51958
Post summary
The post announces CVE‑2025‑51958, a vulnerability in the DokuWiki aelsantex runcommand plugin that permits unauthenticated command execution; it does not mention a PoC, exploit tool, or patch.
🔴 CVE-2025-51958 - Critical aelsantex runcommand 2014-04-01, a plugin for DokuWiki, allows unauthenticated attackers to execute arbitrary system commands via lib/plugins/runcommand/postaction.php. https://www.thehackerwire.com/vulnerability/CVE-2025-51958/ https://t.co/e0HeLrDhVo
Post summary
The post announces a critical CVE in the aelsantex runcommand plugin for DokuWiki, highlighting that unauthenticated users can execute arbitrary system commands via a specific PHP file.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | aelsantex | runcommand | 2014-04-01 | dokuwiki | - |