Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-2421 EUVD-2025-13111GHSA-wwmj-wfcr-vx7r

Remote Code Execution in Profelis Informatics' SambaBox

Published May 2, 2025 · Updated Jun 6, 2026 · Assigned by TR-CERT

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in Profelis Informatics SambaBox allows Code Injection.

This issue affects SambaBox: before 5.1.

Affected products

VendorProductAffectedFixed
Profelis Informatics SambaBox < 5.1 5.1

References