CVE-2025-6225: Kieback&peter Neutrino-Glt

Medium severity, CVSS 6.9. EPSS: 1.1% chance of exploitation in the next 30 days.

Kieback&Peter Neutrino-GLT product is used for building management. It's web component "SM70 PHWEB" is vulnerable to shell command injection via login form. The injected commands would execute with low privileges. The vulnerability has been fixed in version 9.40.02

Affected products

• Kieback&peter Neutrino-Glt: before 9.40.02 (fixed in 9.40.02)

Published 2026-01-07. Last modified 2026-10-07.