Critical RCE Vulnerability in Fanvil x7a Management Portal
A critical vulnerability, CVE-2025-70518, with a CVSS score of 10, has been discovered in the Fanvil x7a management portal's diagnostic ping tool. This vulnerability allows unauthenticated attackers to inject commands and run code in the underlying Android operating system. The affected version is firmware version 2.6.0.1182. Immediate patching or mitigation is recommended to prevent potential exploitation.