CVE-2025-14213: Cato's Socket WebUI is vulnerable to OS Command Injection
Published Mar 31, 2026
·Updated
Cato Networks’ Socket versions prior to 25 contain a command injection vulnerability that allows an authenticated attacker with access to the Socket web interface (UI) to execute arbitrary operating system commands as the root user on the Socket’s internal system.
Affected Software
1 affected component
Cato Networks Socket<25
Event History
Mar 31, 2026
CVE Published
via MITRE·11:35 AM
Data Sourced
via MITRE·11:35 AM
DescriptionWeakness
Data Sourced
via NVD·12:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-14213?
CVE-2025-14213 is rated as a high-severity vulnerability due to its potential for unauthorized OS command execution.
2
How do I fix CVE-2025-14213?
To fix CVE-2025-14213, upgrade Cato Networks Socket to version 25 or later.
3
Who is affected by CVE-2025-14213?
CVE-2025-14213 affects all versions of Cato Networks Socket prior to version 25.
4
What type of vulnerability is CVE-2025-14213?
CVE-2025-14213 is classified as an OS Command Injection vulnerability.
5
Can CVE-2025-14213 be exploited remotely?
Yes, CVE-2025-14213 can be exploited remotely if an attacker has access to the Socket web interface.