CVE 8.8 HIGH

CVE-2026-25201_CVE-2026-25201

8.8 / 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

An unauthenticated user can upload arbitrary files to execute remote code, leading to privilege escalation in MagicInfo9 Server.
This issue affects MagicINFO 9 Server: less than 21.1090.1.

Basic Information

ID CVE-2026-25201
Source samsung.tv_appliance
Published Feb 2, 2026 at 04:49

Affected Product

Vendor Samsung Electronics
Product MagicINFO 9 Server
Version 21.1090.1
Affected Versions Samsung Electronics MagicINFO 9 Server 21.1090.1

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.