CVE-2025-50572

Published: Jul 31, 2025

Modified: Jan 12, 2026

PUBLISHED

Description

Archer 6.11.00204.10014 allows attackers to execute arbitrary code via crafted system inputs that would be exported into the CSV and be executed after the user opened the file with compatible applications. NOTE: the Supplier does not accept this as a valid vulnerability report against their product.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://archer.com

http://rsa.com

https://github.com/shorooq-hummdi/Archer-csv-injection-command-exec/blob/main/README.md

https://www.archerirm.community/s/blogs/formula-injection-into-csv-files-vulnerability-in-rsa-archer-6-1-x-and-higher-MCOCQFO3WCQBCCHMKNC74JGSFWQY

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2025-50572

Description

Affected Products

References