CVE-2025-41661: An unauthenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of Cross-Site Request Forgery (CSRF)…

PriorityP354high8.8CVSS 3.1

AVNACLPRNUIRSUCHIHAH

EPSS

0.26%

16.8th percentile

An unauthenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of Cross-Site Request Forgery (CSRF) protection.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
weidmueller	ie-sr-2tx-wl	< V1.49	V1.49
weidmueller	ie-sr-2tx-wl-4g-eu	< V1.62	V1.62
weidmueller	ie-sr-2tx-wl-4g-us-v	< V1.62	V1.62

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.