VICIdial Group vulnerabilities
We track 1 vulnerability in VICIdial Group products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 10, 2025.
1vulnerabilities
1critical
0high
0exploited
9.3average CVSS score
Latest VICIdial Group vulnerabilities
- 9.3 Critical severity
An unauthenticated command injection vulnerability exists in VICIdial versions 2.9 RC1 through…
An unauthenticated command injection vulnerability exists in VICIdial versions 2.9 RC1 through 2.13 RC1, within the vicidial_sales_viewer.php component when password encryption is enabled (a non-default configuration). The application improperly passes the HTT