CVE-2025-22398

Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution as root. Exploitation may lead to a system take over by an attacker. This vulnerability is considered critical as it can be leveraged to completely compromise the operating system. Dell recommends customers to upgrade at the earliest opportunity.

• CWE-78

• https://www.dell.com/support/kbdoc/en-us/000300090/dsa-2025-116-security-update-for-dell-unity-dell-unityvsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilitiesVendor Advisory

Published

Mar 28, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-22390An issue was discovered in Optimizely EPiServer.CMS.Core bef…7.5
• CVE-2025-22391Improper access control for some SigTest before version 6.1.…6.7
• CVE-2025-22392Out-of-bounds read in firmware for some Intel(R) AMT and Int…5.9
• CVE-2025-22394Dell Display Manager, versions prior to 2.3.2.18, contain a …7
• CVE-2025-22395Dell Update Package Framework, versions prior to 22.01.02, c…7.8
• CVE-2025-22397Dell Integrated Dell Remote Access Controller 9, 14G version…4.9
• CVE-2025-22399Dell UCC Edge, version 2.3.0, contains a Blind SSRF on Add C…7.8
• CVE-2025-2240A flaw was found in Smallrye, where smallrye-fault-tolerance…7.5
• CVE-2025-22402Dell Update Manager Plugin, version(s) 1.5.0 through 1.6.0, …5.4
• CVE-2025-22403In sdp_snd_service_search_req of sdp_discovery.cc, there is …9.8
• CVE-2025-22404In avct_lcb_msg_ind of avct_lcb_act.cc, there is a possible …8.4
• CVE-2025-22405In multiple locations, there is a possible way to execute ar…8.4