Waterfall - Wf-500 - CRITICAL - CVE-2025-41275. A vulnerability has been identified in the Console WebUI of Nozomi Networks' Waterfall WF-500 TX and RX hosts, where improper neutralization of special elements can allow remote unauthenticated attackers to execute arbitrary operating system commands. This could potentially compromise the integrity and security of the affected devices, exposing them to further exploitation.