CVE-2025-54322

Critical

Published: 27/12/2025(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

Xspeeder SXZOS through 2025-12-26 allows root remote code execution via base64-encoded Python code in the chkid parameter to vLogin.py. The title and oIP parameters are also used.

Risk Assessment

An attacker can gain full control of the system with root privileges, potentially leading to complete system compromise.

Recommendation

Immediately update Xspeeder SXZOS to the latest version or apply available security patches.

Original NVD description (English source)

Xspeeder SXZOS through 2025-12-26 allows root remote code execution via base64-encoded Python code in the chkid parameter to vLogin.py. The title and oIP parameters are also used.