PT-2026-5606
CVE-2026-25201
·
Published
2026-02-02
·
Updated
2026-03-10
Description by
CVSS 2.0
10
HighMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
MagicINFO 9 Server versions prior to 21.1090.1
Description
An unauthenticated user can upload arbitrary files, potentially leading to remote code execution and privilege escalation. The issue allows for the upload of files without authentication, which can then be used to execute code on the system.
Recommendations
Update MagicINFO 9 Server to version 21.1090.1 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾