A vulnerability classified as critical has been found in RE11S 1.11. Affected is an unknown function of the file /goform/mp. The manipulation of the argument command leads to command injection.

This vulnerability is traded as CVE-2025-22905. The attack can only be done within the local network. There is no exploit available.