critical9.8
CVE-2025-40625
Unrestricted file upload in TCMAN's GIM v11.
Impact
Unrestricted file upload in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to upload any file within the server, even a malicious file to obtain a Remote Code Execution (RCE).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tcman | Gim | Version 11.0 |