Skip to content
Remote Code Execution Vulnerability in C-Kermit

Remote Code Execution Vulnerability in C-Kermit

First seen 13 Nov 2026, 21:18 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 13, 2026 at 21:19 UTC
  • •C-Kermit 6.0.192 before 11.1.515 is vulnerable to remote code execution.
  • •Attackers can exploit the flaw via REMOTE QUERY and REMOTE ASSIGN.
  • •The CVSS score of 9.2 classifies this vulnerability as critical.

C-Kermit version 6.0.192 prior to 11.1.515 has a remote code execution vulnerability identified as CVE-2026-129125. This flaw allows Kermit clients to execute shell commands on servers where host commands are disabled by exploiting REMOTE QUERY evaluation. Attackers can invoke the command function through REMOTE QUERY or define a macro via REMOTE ASSIGN to bypass security restrictions. The vulnerability has a CVSS score of 9.2, indicating its severity. Users of affected versions are urged to prioritize patching to mitigate risks. No reports of have been confirmed at this time. The vulnerability was disclosed on November 13, 2026.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 2h ago How this analysis works

Timeline

2026-11-13
CVE-2026-129125 disclosed
A critical remote code execution vulnerability in C-Kermit was disclosed, affecting versions before 11.1.515.
Rapid7
2026-11-13
Patch recommendation issued
Users are advised to update to C-Kermit version 11.1.515 or later to mitigate the vulnerability.
Sploitus

More articles in this cluster (2)

Extracted Entities (4)

1 / 4

Common questions

What versions of C-Kermit are affected?
C-Kermit versions 6.0.192 before 11.1.515 are affected by this vulnerability.
What is the CVSS score of this vulnerability?
The CVSS score for CVE-2026-129125 is 9.2, indicating a critical severity level.
What should I do to protect my systems?
Upgrade to C-Kermit version 11.1.515 or later to mitigate the risk associated with this vulnerability.