-/10CrowdSec Score
ICTBroadcast - RCE (CVE-2025-2611)
Published on14-10-2025
First seen on01-01-1970
CVSS 9.3/10ICTBroadcast - ICTBroadcast
0Exploiting IPs reported
The ICTBroadcast application unsafely passes session cookie data to shell processing, allowing an attacker to inject shell commands into a session cookie that get executed on the server. This results in unauthenticated remote code execution in the session handling.
Exploitation
Get real-time information about exploitation attempts and actors involved.
Protection
Find out relevant information to protect your stack against this CVE.
Blocklist
With our advanced worldwide network detection, CrowdSec can provide a list of IPs known for exploiting the vulnerability.
To increase your protection against this CVE, block exploitation attempts with this list of identified actors.