https://vulnogram.org/ Most recent CVEs assigned by Crestron Electronics, Inc. (crestron). https://vulnogram.org/seaview/icons/crestron.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-7865 https://vulnogram.org/CVE-2026-7865 A hidden console command is vulnerable to command injection flaw when control characters are passed to its second argument. A third party researcher Eugene Lim had discovered vulnerability in the way console command passes to a popen function call. A… High Tue, 05 May 2026 15:05:12 GMT https://vulnogram.org/CVE-2025-47415 https://vulnogram.org/CVE-2025-47415 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CRESTRON TOUCHSCREENS x70 allows Relative Path Traversal.This issue affects TOUCHSCREENS x70: from 3.000.0110.001 before 3.001.0031.001. Confirmed Affecte… Medium Tue, 09 Sep 2025 19:20:35 GMT https://vulnogram.org/CVE-2025-47416 https://vulnogram.org/CVE-2025-47416 A vulnerability exists in the ConsoleFindCommandMatchList function in libsymproc. so imported by ctpd that may lead to unauthorized execution of an attacker-defined file that gets prioritized by the ConsoleFindCommandMatchList. A third-party research… Medium Tue, 09 Sep 2025 13:52:45 GMT https://vulnogram.org/CVE-2025-47421 https://vulnogram.org/CVE-2025-47421 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in CRESTRON TOUCHSCREENS x70 allows Argument Injection.This issue affects TOUCHSCREENS x70: from 3.001.0031.001 through 3.001.0034.001. A specially craft… High Wed, 03 Sep 2025 13:49:40 GMT https://vulnogram.org/CVE-2025-47420 https://vulnogram.org/CVE-2025-47420 266 vulnerability in Crestron Automate VX allows Privilege Escalation.This issue affects Automate VX: from 5.6.8161.21536 through 6.4.0.49. High Tue, 06 May 2025 21:33:39 GMT https://vulnogram.org/CVE-2025-47419 https://vulnogram.org/CVE-2025-47419 Cleartext Transmission of Sensitive Information vulnerability in Crestron Automate VX allows Sniffing Network Traffic. The device allows Web UI and API access over non-secure network ports which exposes sensitive information such as user passwords. T… Critical Network Exploitable Tue, 06 May 2025 20:52:44 GMT https://vulnogram.org/CVE-2025-47418 https://vulnogram.org/CVE-2025-47418 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Crestron Automate VX allows Functionality Misuse. There is no visible indication when the system is recording and recording can be enabled remotely via a network API. This is… Medium Tue, 06 May 2025 20:13:38 GMT https://vulnogram.org/CVE-2025-47417 https://vulnogram.org/CVE-2025-47417 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Crestron Automate VX allows Functionality Misuse. When Enable Debug Images in Crestron Automate VX is active, snapshots of the captured video or portions thereof are stored l… Medium Tue, 06 May 2025 19:49:09 GMT