Skip to content

Conversation

@thewindghost
Copy link
Contributor

@thewindghost thewindghost commented Dec 30, 2025

/claim #14623

PR Information

  • Fixed CVE-2020-XXX / Added CVE-2020-XXX / Updated CVE-2020-XXX
  • References:

Template validation

  • Validated with a host running a vulnerable version and/or configuration (True Positive)
  • Validated with a host running a patched version and/or configuration (avoid False Positive)

Additional Details (leave it blank if not applicable)

Additional References:

Old Version:

Inked25aca779-c30d-43bf-b856-4605c5b405bd_LI

  • With -debug:

Inkedf0c1b07f-c921-4225-991a-d5af81b76392_LI


New Version:

Inked112cebc0-445c-41ea-8c8c-cc44b47441bb_LI

  • With -debug:

Inked7d0647f7-4ea5-4231-8005-2c40a72e265d_LI

Inked4bfd0a26-92e3-42a8-93be-d24f0477c9a5_LI

@thewindghost
Copy link
Contributor Author

Hi @ritikchaddha @DhiyaneshGeek, any updates?

I provided 2 or 3 real-world production environments with vulnerabilities along with PR #14626.

  • Please check [email protected] email and verify it. Verification is straightforward as my POC matches the real-world environment.
  • Don't worry about why I'm focusing on the Root user; as far as I know, using VMware NSX SD-WAN Edge (also known as Velocloud) requires root access to have critical privileges, so it's unlikely any user other than root could access it.

@thewindghost
Copy link
Contributor Author

Hi @ritikchaddha @DhiyaneshGeek, any updates. Because there hasn't been a specific response, I'm not sure if my problem has been resolved.

@ritikchaddha ritikchaddha added the Done Ready to merge label Jan 6, 2026
@ritikchaddha
Copy link
Contributor

Hello @thewindghost, thank you for sharing this template with the community and contributing to this project. This template is validated and ready for merging. 🍻

@thewindghost
Copy link
Contributor Author

hi @ritikchaddha Thank you for the improved updates!

@DhiyaneshGeek DhiyaneshGeek linked an issue Jan 6, 2026 that may be closed by this pull request
@DhiyaneshGeek DhiyaneshGeek merged commit 59ff217 into projectdiscovery:main Jan 6, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

CVE-2018-6961 - VMware NSX SD-WAN Edge - Command Injection 💰

3 participants