High severity7.5NVD Advisory· Published Oct 24, 2025· Updated Jun 17, 2026

CVE-2025-60938

Description

Emoncms 11.7.3 has a remote code execution vulnerability in the firmware upload feature that allows authenticated users to execute arbitrary commands on the target system. The vulnerability stems from insufficient input validation of user-controlled parameters including filename, port, baud_rate, core, and autoreset within the /admin/upload-custom-firmware endpoint.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Openenergymonitor/Emoncms
cpe:2.3:a:openenergymonitor:emoncms:11.7.3:*:*:*:*:*:*:*
Emoncms/Emoncmsdescription
Emoncms/emoncmsllm-fuzzy
Range: <11.7.3

Patches

Vulnerability mechanics

References

github.com/emoncms/emoncms/issues/1941nvdExploitIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000