Security Advisory

CVE-2025-13590

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-02-19 10:05:06

Last updated 2026-06-18 02:41:22

Assigner WSO2

CVSS score 9.1

State PUBLISHED

Description

A malicious actor with administrative privileges can upload an arbitrary file to a user-controlled location within the deployment via a system REST API. Successful uploads may lead to remote code execution. By leveraging the vulnerability, a malicious actor may perform Remote Code Execution by uploading a specially crafted payload.

← Browse all CVEs View on cve.org ↗