High · 7.1 CVE-2025-7958 EUVD-2025-210348GHSA-9639-6pf9-jh9r

A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code…

Published Jun 26, 2026 · Updated Jun 26, 2026 · Assigned by trellix

Vendor: Trellix Product: Trellix Network Security NX, EX, FX, AX, and CMS

Description

A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web interface and Alert artifact details.

Affected products

Vendor	Product	Affected	Fixed
Trellix	Trellix Network Security NX, EX, FX, AX, and CMS	10.0.4	—

References

https://support.trellix.com/s/article/000015433