VulnSocial

CVE-2025-63414Disclosure(allskyteam / allsky)

LOWCVSS 10.0 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A Path Traversal vulnerability in the Allsky WebUI version v2024.12.06_06 allows an unauthenticated remote attacker to achieve arbitrary command execution. By sending a crafted HTTP request to the /html/execute.php endpoint with a malicious payload in the id parameter, an attacker can execute arbitrary commands on the underlying operating system, leading to full remote code execution (RCE).

allskyteam CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Exploit / PoC references
Other references
Weakness type (CWE)
CWE-22CWE-78

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • allsky

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
allskyteam
Products
allsky

1 version affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-03-13: 1Technical Details · 2026-03-13: 103-13
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • PulsePatch.io@pulsepatchio
    Disclosure

    `Allsky WebUI` v2024.12.06_06 is vulnerable to Path Traversal (CVE-2025-63414), allowing unauthenticated remote command execution. Review network access for `Allsky` deployments. #PathTraversal #RCE #InfoSec https://www.pulsepatch.io/posts/cve-2025-63414-allsky-webui-rce-vulnerability

    Post summary

    Allsky WebUI v2024.12.06_06 is vulnerable to path traversal, allowing unauthenticated remote command execution (CVE‑2025‑63414). Review network access controls for Allsky deployments.

    00000149
    1 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appallskyteamallsky2024.12.06_06--

Explore more

Back to dashboardallskyteam CVEsallsky vulnerabilities