{"vulnerability": "cve-2025-41276", "sightings": [{"uuid": "6685dfd3-1636-44a9-b06e-f6f4f8f9c3dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-41276", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmym7n453n2i", "content": "CVE-2025-41276 - Nozomi Networks Waterfall WF-500 OS Command Injection\nCVE ID : CVE-2025-41276\n \n Published : May 29, 2026, 12:16 p.m. | 16\u00a0minutes ago\n \n Description : Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ...", "creation_timestamp": "2026-05-29T13:08:41.851673Z"}, {"uuid": "f5e40702-a7ed-4502-896d-7bd5ff6f5958", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-41276", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3moudqkm2oi2b", "content": "\ud83d\udea8  ALERT: CVE-2025-41276\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nNozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthe", "creation_timestamp": "2026-06-22T07:16:50.041850Z"}]}