High severity · published Jun 26, 2026
CVE-2025-7958
A Code Injection vulnerability existed in Trellix Network Security CM and NX
7.1
CVSS
0.3%
EPSS
No
On KEV
Description
A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web interface and Alert artifact details.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TN
Trellix Network Security NX, EX, FX, AX, and CMS · Trellix
10.0.4 · source: vendor
Affected product
TN
Trellix Network Security NX, EX, FX, AX, and CMS
Trellix