CVE-2025-41250

Header injection vulnerability

High8.5EPSS 0.66%

Published: 29 Sept 2025
Updated: 26 Feb 2026
Reserved: 16 Apr 2025
Assigned by: vmware

Description

VMware vCenter contains an SMTP header injection vulnerability. A malicious actor with non-administrative privileges on vCenter who has permission to create scheduled tasks may be able to manipulate the notification emails sent for scheduled tasks.

Scores

CVSS scores of CVE-2025-41250, by who scored it
Scored by	CVSS	Score	Vector
vmwareCNA (assigner)	3.1	High8.5	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L
NVDNVD · Deferred	3.1	High8.5	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L

EPSS (exploitation in 30 days): 0.66% · top 48% of all CVEs (6 Nov 2026)
CISA SSVC: Exploitation: none · Automatable: no · Technical impact: total

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.5.

Weakness

CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection') (opens in a new tab)All about CWE-77 and its CVEs

Affected products

VMware · vCenter
- affected 8.0 – < 8.0 U3g
- affected 7.0 – < 7.0 U3w
VMware · Cloud Foundation
- affected 9.x.x.x – < 9.0.1.0
- affected 5.x – < 5.2.2
- affected 4.5.x
VMware · Telco Cloud Platform
- affected 5.x, 4.x, 3.x, 2.x
VMware · Telco Cloud Infrastructure
- affected 3.x, 2.x
VMware · vSphere Foundation
- affected 9.x.x.x – < 9.0.1.0

References (1)

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36150 (opens in a new tab)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2025-41250](https://trackcve.app/badge/CVE-2025-41250.svg)](https://trackcve.app/cve/CVE-2025-41250)

Record last updated 26 Feb 2026, 17:47 UTC.