CVE-2025-26817: Netwrix Password Secure

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

Netwrix Password Secure 9.2.0.32454 allows OS command injection.

Affected products

• Netwrix Password Secure: before 9.2.1 (fixed in 9.2.1)

Published 2025-04-03. Last modified 2026-06-17.