Xspeeder vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Xspeeder products: 1 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2025-54322 Critical · 9.8 CWE-94 Dec 27, 2025

Code Injection in Xspeeder Sxzos

Xspeeder SXZOS through 2025-12-26 allows root remote code execution via base64-encoded Python code in the chkid parameter to vLogin.py. The title and oIP parameters are also used.