CVE-2025-41278: Waterfall-Security Wf-500 Firmware

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Nozomi Networks Labs identified a CWE-125: Out-of-bounds Read in Waterfall WF-500 RX Host in version 7.10.0.0 R2601141040 that allows attackers with access to the TX Host to execute code on the RX Host.

Affected products

• Waterfall-Security Wf-500 Firmware: up to and including 7.9.1.0_r2502171040

Published 2026-05-29. Last modified 2026-07-21.