PT-2026-7112
CVE-2025-10465
·
Published
2026-02-09
·
Updated
2026-03-09
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Sensaway versions through 09022026
Description
Sensaway software contains a flaw that permits the upload of a web shell to a web server through unrestricted file uploads. This allows for potentially malicious code execution. The vendor was contacted regarding this issue but did not respond.
Recommendations
Versions through 09022026 are affected and should be updated when a patch becomes available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾