CVE-2025-67260

—

CVSS 3.1

8.8 high

EPSS

<1%p32

Published

Mar 20, 2026 (Mar 20, 2026)

Modified

Jul 5, 2026

Description

The Terrapack software, from ASTER TEC / ASTER S.p.A., with the indicated components and versions has a file upload vulnerability that may allow attackers to execute arbitrary code. Vulnerable components include Terrapack TkWebCoreNG:: 1.0.20200914, Terrapack TKServerCGI 2.5.4.150, and Terrapack TpkWebGIS Client 1.0.0.

Vendors: aster-te
Products: terrapack tkservercgi, terrapack tkwebcoreng, terrapack tpkwebgis
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.