EVE X1/X5 Server vulnerabilities

2 known vulnerabilities in EVE X1/X5 Server from Ilevia Srl.. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  EVE X1/X5 Server: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-34187Sep 16, 2025Ilevia Srl.EPSS 3.27%

  Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a misconfiguration in the sudoers file that allows passwordless execution of certain Bash scripts. If these scripts are writable by web-facing users or accessible via command injection, attackers can rep

• 9.8 Critical severity

  EVE X1/X5 Server: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-34186Sep 16, 2025Ilevia Srl.

  Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a vulnerability in its authentication mechanism. Unsanitized input is passed to a system() call for authentication, allowing attackers to inject special characters and manipulate command parsing. Because