CVE-2026-25201

—

CVSS 3.1

8.8 high

EPSS

<1%p34

Published

Feb 2, 2026 (Feb 2, 2026)

Modified

Jun 17, 2026

Description

An unauthenticated user can upload arbitrary files to execute remote code, leading to privilege escalation in MagicInfo9 Server. This issue affects MagicINFO 9 Server: less than 21.1090.1.

Vendors: samsung
Products: magicinfo 9 server
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.