References https://nvd.nist.gov/vuln/detail/CVE-2025-36604 https://labs.watchtowr.com/its-never-simple-until-it-is-dell-unityvsa-pre-auth-command-injection-cve-2025-36604/ https://www.dell.com/support/kbdoc/en-us/000350756/dsa-2025-281-security-update-for-dell-unity-dell-unityvsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities https://zeropath.com/blog/cve-2025-36604-dell-unity-os-command-injection-summary https://www.sentinelone.com/vulnerability-database/cve-2025-36604/ https://github.com/watchtowrlabs/watchTowr-vs-Dell-UnityVSA-PreAuth-CVE-2025-36604 https://www.tenable.com/plugins/was/115000 https://github.com/advisories/GHSA-g5wq-c47p-2h9f https://hackread.com/dell-unityvsa-flaw-command-execution-without-login/
Related VulnerabilitiesPoCCVE-2025-11953: React Native Community CLI - Unauthenticated OS Command InjectionWordpress wpForo Forum /community/recent/ SQL 注入漏洞(CVE-2026-1581)Unity Runtime 访问控制不当漏洞InvisionCommunity存在代码注入漏洞(CVE-2025-47916)PoCCVE-2010-1081: Joomla! Component com_communitypolls 1.5.2 - Local File InclusionPoCCVE-2019-14696: Open-School 3.0/Community Edition 2.3 - Cross-Site ScriptingPoCCVE-2019-3911: LabKey Server Community Edition <18.3.0 - Cross-Site ScriptingPoCCVE-2019-3912: LabKey Server Community Edition <18.3.0 - Open RedirectPoCCVE-2020-13158: Artica Proxy Community Edition <4.30.000000 - Local File InclusionPoCCVE-2021-40651: OS4Ed OpenSIS Community 8.0 - Local File InclusionPoCCVE-2021-41381: Payara Micro Community 5.2021.6 Directory TraversalPoCCVE-2024-30163: IPS Community Suite - Unauthenticated SQL InjectionPoCCVE-2025-47916: Invision Community <=5.0.6 Unauthenticated RCE via Template Injection