Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2025-59890

Improper input sanitization in the file archives upload functionality of Eaton Galileo software allows traversing paths which could lead into an attacker with local access to execu

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Eaton

Description

Improper input sanitization in the file archives upload functionality of Eaton Galileo software allows traversing paths which could lead into an attacker with local access to execute unauthorized code or commands. This security issue has been fixed in the latest version of Galileo which is available on the Eaton download center.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Eaton Eaton Galileo Software

Default version status: unaffected

  • 0 to ≤ 11.1.1affected

References