CVE-2025-11571 — Vulnerable endpoints accept user-controlled input through a URL in JSON format which enables command execution. The commands allowed to execute can open executables. However, the commands cannot pass — CVE Database · The Intelligence Room