Quick answers
- Is CVE-2025-69600 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2025-69600 being exploited in the wild.
- How severe is CVE-2025-69600?
- Informational severity, with a CVSS score of 0, published 27 May 2026.
- Which products and versions are affected?
- Raynet RayVentory Scan Engine 12.6 Update 8 and earlier.
- Is there a fix for CVE-2025-69600?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2025-69600 attacked?
- It is attacked with local access, in a network appliance.
- Am I affected by CVE-2025-69600?
- Check whether you run Raynet RayVentory Scan Engine at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
Raynet RayVentory Scan Engine (rvia) contains multiple command injection vulnerabilities in its command-line interface. The application fails to properly sanitize or terminate arguments passed to options such as 'getconfig', 'upload', 'inventory', and 'oracle'. Specifically, an attacker can inject shell commands by using semicolons or other shell metacharacters in these arguments. Additionally, the application is vulnerable to argument injection in its internal search logic; it uses an incorrectly constructed 'find' command to locate Java runtimes, which can be exploited by creating a crafted directory structure that satisfies the malformed search criteria. These flaws allow a local attacker to achieve arbitrary code execution with the privileges of the rvia process.
Affected products
- Raynet RayVentory Scan Engine (rvia) 12.6 Update 8 and earlier
Timeline
- 2026-05-27: advisory: NVD publication date