CVE-2018-11642: Dialogic Powermedia Xms

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Incorrect Permission Assignment on the /var/www/xms/cleanzip.sh shell script run periodically in Dialogic PowerMedia XMS through 3.5 allows local users to execute code as the root user.

Affected products

• Dialogic Powermedia Xms: up to and including 3.5

Published 2018-07-03. Last modified 2026-06-17.