Tag
#Fanvil x7a
newsCRITICAL 9.8
Critical Vulnerability in Fanvil x7a Firmware Allows Unauthenticated Code Execution (CVE-2025-70521)
A critical vulnerability (CVE-2025-70521, CVSS 9.8) exists in Fanvil x7a firmware version 2.6.0.1182, allowing unauthenticated attackers to inject commands and execute code on the underlying Android operating system. Immediate action is required to secure affected systems.
articleCRITICAL 10.0
Critical RCE Vulnerability in Fanvil x7a Management Portal
A critical vulnerability, CVE-2025-70518, with a CVSS score of 10, has been discovered in the Fanvil x7a management portal's diagnostic ping tool. This vulnerability allows unauthenticated attackers to inject commands and run code in the underlying Android operating system. The affected version is firmware version 2.6.0.1182. Immediate patching or mitigation is recommended to prevent potential exploitation.