CVE-2025-65074

Vulnerability Description

WaveView client allows users to execute restricted set of predefined commands and scripts on the connected WaveStore Server. A malicious attacker with high-privileges is able to execute arbitrary OS commands on the server using path traversal in the showerr script.

This issue was fixed in version 6.44.44

Vulnerability Details

Published Date

December 16, 2025

Last Modified

December 22, 2025

Source

NVD

CVE-2025-65074

Vulnerability Description

Vulnerability Details

Discussion (0)

Add Comment