{"cvss":8.7,"datePublished":"2026-11-03T00:00:00Z","dateUpdated":"2026-11-03T00:00:00Z","description":"Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command ('Command Injection') in Danfoss AK-SM8xxA Series prior to version 4.3.1, leading to a potential post-authenticated remote code execution on an attacked system.","dueDate":"","id":"CVE-2025-41451","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"AK-SM8xxA Series","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"  Improper Neutralization of Special Elements used in a Command","vendor":"Danfoss"}