Command Injection Vulnerability in MiR Software by Mobile Industrial Robots

CVE-2025-8748

What is CVE-2025-8748?

A command injection vulnerability exists in MiR software versions prior to 3.0.0, allowing an authenticated user to send a specifically crafted HTTP request. This request could lead to the execution of arbitrary commands on the underlying operating system, potentially compromising system integrity and security. Organizations utilizing these vulnerable versions should prioritize upgrading to mitigate these security risks.

References