CVE-2026-25202

—

CVSS 3.1

9.8 critical

EPSS

<1%p38

Published

Feb 2, 2026 (Feb 2, 2026)

Modified

Jun 17, 2026

Description

The database account and password are hardcoded, allowing login with the account to manipulate the database in MagicInfo9 Server.This issue affects MagicINFO 9 Server: less than 21.1090.1.

Vendors: samsung
Products: magicinfo 9 server
Weakness: CWE-798
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.