CVE-2025-11787

High · 8.8

CVSS

8.8

EPSS

1.0%

Published

Dec 2, 2025

CISA due date

—

The record

Command injection vulnerability in the operating system in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2 through the 'GetDNS()', 'CheckPing()' and 'TraceRoute()' functions.

Affected packages

Ecosystem	Package	Introduced	Fixed