“`html
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday included a critical security weakness affecting Smartbedded Meteobridge in its Known Exploited Vulnerabilities (KEV) catalog, referencing proof of ongoing exploitation.
The flaw, CVE-2025-4008 (CVSS score: 8.7), represents an instance of command injection within the Meteobridge web interface that may lead to code execution.
“`