CVE-2025-50329

Name of the Vulnerable Software and Affected Versions ConeXware, Inc Power Archiver versions prior to 22.00.12 Drupal (affected versions not specified)

Description An issue in the powerarc.exe executable allows a remote attacker to escalate privileges and execute arbitrary code. Separately, a SQL injection exists in Drupal that allows for database compromise without requiring authentication. SQL injection is a technique where an attacker inserts malicious SQL code into a query, allowing them to manipulate the database.

Recommendations Update ConeXware, Inc Power Archiver to version 22.00.12 or later. Apply the latest security patches to Drupal to resolve the SQL injection issue.