Longwatch RCE Vulnerability Let Attackers Execute Remote Code With Elevated Privileges

A critical remote code execution (RCE) vulnerability, CVE-2025-13658, was disclosed in Industrial Video & Control's Longwatch (versions 6.309–6.334) that permits unauthenticated attackers to execute arbitrary code as SYSTEM via simple HTTP GET requests; CISA issued an advisory and the vendor released patched version 6.335, and organizations are advised to apply the update and implement network segmentation and access controls.