High severity8.4NVD Advisory· Published Apr 27, 2025· Updated Jun 17, 2026

CVE-2025-46579

Description

There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the DDE commands can be executed.

Affected products

Zte/GoldenDBllm-create
ZTE/GoldenDBv5
Range: 6.1.03

Patches

Vulnerability mechanics

References

support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/1036467615091601474nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.546
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000