CVE-2025-26818: Netwrix Password Secure

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Netwrix Password Secure through 9.2 allows command injection.

Affected products

• Netwrix Password Secure: before 9.2.2 (fixed in 9.2.2)

Published 2025-04-03. Last modified 2026-06-17.