VYPR

OP5 Monitor

by ITRS Group

CVEs (1)

  • CVE-2025-34115HigJul 15, 2025
    risk 0.60cvss epss 0.02

    An authenticated command injection vulnerability exists in OP5 Monitor through version 7.1.9 via the 'cmd_str' parameter in the command_test.php endpoint. A user with access to the web interface can exploit the 'Test this command' feature to execute arbitrary shell commands as…