Is CVE-2025-41771 being exploited?

No public exploit is currently tracked.

How severe is CVE-2025-41771?

CVE-2025-41771 has a CVSS v3 severity of MEDIUM (4.3).

Back

CVE-2025-41771

Description

An authenticated attacker with low privileges can access an endpoint in the controller’s web interface that is vulnerable to SQL injection. The vulnerability affects a SQLite database used only for storing notification messages. Therefore, the impact is limited to the system’s notification functionality.