CVE-2025-4008 Smartbedded Meteobridge
Smartbedded Meteobridge contains a command injection vulnerability that could allow remote unauthenticated attackers to gain arbitrary command execution with elevated privileges (root) on affected devices.
- CVSS
- not scored
On CISA’s exploited list
Smartbedded Meteobridge Command Injection Vulnerability
- Added
- 2025-10-02
- Federal patch deadline
- 2025-10-23
- Ransomware use
- not known