Firetruck

CVE-2025-4008

KEV
Updated Feb 26, 2026 · PUBLISHED
View KEV entry →

Description

Smartbedded Meteobridge contains a command injection vulnerability that could allow remote unauthenticated attackers to gain arbitrary command execution with elevated privileges (root) on affected devices.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
MeteoBridgeSmartbedded / MeteoBridge>= 0, <= 6.1affected