{"vulnerability": "cve-2025-41272", "sightings": [{"uuid": "3e1049b5-d9d4-4fc7-8664-d775d3daa285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-41272", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmylqp4ykq2t", "content": "CVE-2025-41272 - Nozomi Networks Waterfall WF-500 OS Command Injection\nCVE ID : CVE-2025-41272\n \n Published : May 29, 2026, 12:16 p.m. | 16\u00a0minutes ago\n \n Description : Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ...", "creation_timestamp": "2026-05-29T13:00:20.859443Z"}, {"uuid": "ec80c4cf-1164-4045-ae0e-301d6a54597e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-41272", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3moucvbux762v", "content": "\ud83d\udea8  ALERT: CVE-2025-41272\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nNozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthe", "creation_timestamp": "2026-06-22T07:01:35.184102Z"}]}