Magicinfo 9 Server

magicinfo_9_server

Vendor: Samsung • 23 CVEs

CVEs (23)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-25202 1Samsung 1Magicinfo 9 Server Jun 17, 2026 Feb 2, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 The database account and password are hardcoded, allowing login with the account to manipulate the database in MagicInfo9 Server.This issue affects MagicINFO 9 Server: less than 21.1090.1.
CVE-2026-25201 1Samsung 1Magicinfo 9 Server Jun 17, 2026 Feb 2, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 An unauthenticated user can upload arbitrary files to execute remote code, leading to privilege escalation in MagicInfo9 Server. This issue affects MagicINFO 9 Server: less than 21.1090.1.
CVE-2026-25200 1Samsung 1Magicinfo 9 Server Jun 17, 2026 Feb 2, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can result in account takeover This issue affects MagicINFO 9 Server: less than 21....Show more A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can result in account takeover This issue affects MagicINFO 9 Server: less than 21.1090.1.Show less
CVE-2025-54455 1Samsung 1Magicinfo 9 Server Jun 17, 2026 Jul 23, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Use of Hard-coded Credentials vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicINFO 9 Server: less than 21.1080.0.
CVE-2025-54454 1Samsung 1Magicinfo 9 Server Jun 17, 2026 Jul 23, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Use of Hard-coded Credentials vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicINFO 9 Server: less than 21.1080.0.
CVE-2025-54453 1Samsung 1Magicinfo 9 Server Jun 17, 2026 Jul 23, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.
CVE-2025-54452 1Samsung 1Magicinfo 9 Server Jun 17, 2026 Jul 23, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Improper Authentication vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicINFO 9 Server: less than 21.1080.0.
CVE-2025-54451 1Samsung 1Magicinfo 9 Server Jun 17, 2026 Jul 23, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Improper Control of Generation of Code ('Code Injection') vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.
CVE-2025-54450 1Samsung 1Magicinfo 9 Server Jun 17, 2026 Jul 23, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.
CVE-2025-54449 1Samsung 1Magicinfo 9 Server Jun 17, 2026 Jul 23, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.
CVE-2025-54448 1Samsung 1Magicinfo 9 Server Jun 17, 2026 Jul 23, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.
CVE-2025-54447 1Samsung 1Magicinfo 9 Server Jun 17, 2026 Jul 23, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.
CVE-2025-54446 1Samsung 1Magicinfo 9 Server Jun 17, 2026 Jul 23, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Upload a Web Shell to a Web Server.This issue affects MagicINFO 9 Server: less...Show more Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Upload a Web Shell to a Web Server.This issue affects MagicINFO 9 Server: less than 21.1080.0Show less
CVE-2025-54445 1Samsung 1Magicinfo 9 Server Jun 17, 2026 Jul 23, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Improper Restriction of XML External Entity Reference vulnerability in Samsung Electronics MagicINFO 9 Server allows Server Side Request Forgery.This issue affects MagicINFO 9 Server: less than 21.1080.0.
CVE-2025-54444 1Samsung 1Magicinfo 9 Server Jun 17, 2026 Jul 23, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.
CVE-2025-54443 1Samsung 1Magicinfo 9 Server Jun 17, 2026 Jul 23, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Upload a Web Shell to a Web Server.This issue affects MagicINFO 9 Server: less...Show more Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Upload a Web Shell to a Web Server.This issue affects MagicINFO 9 Server: less than 21.1080.0Show less
CVE-2025-54442 1Samsung 1Magicinfo 9 Server Jun 17, 2026 Jul 23, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.
CVE-2025-54441 1Samsung 1Magicinfo 9 Server Jun 17, 2026 Jul 23, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.
CVE-2025-54440 1Samsung 1Magicinfo 9 Server Jun 17, 2026 Jul 23, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.
CVE-2025-54439 1Samsung 1Magicinfo 9 Server Jun 17, 2026 Jul 23, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0.

12 Next