{"uuid": "5cc452f6-664d-4b08-b37a-ff0810cd90bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58034", "type": "seen", "source": "https://t.me/pphm_HackerNews/1138", "content": "Critical WAF Flaw Under Active Exploitation by Threat Actors\n\nSecurity researchers and the vendor have confirmed that a newly identified flaw in the WAF device enables an authenticated attacker\u2014or in some cases even a partially authenticated one\u2014to execute arbitrary code via crafted HTTP requests or CLI commands. The issue is tracked as CVE-2025-58034, affecting versions such as 8.0.0 through 8.0.1 and 7.6.0 through 7.6.5.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-22T05:00:04.671845Z"}