high8.8
CVE-2026-25201
An unauthenticated user can upload arbitrary files to execute remote code, leading to privilege escalation in MagicInfo9 Server.
Impact
An unauthenticated user can upload arbitrary files to execute remote code, leading to privilege escalation in MagicInfo9 Server. This issue affects MagicINFO 9 Server: less than 21.1090.1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Samsung | Magicinfo 9 Server | before 21.1090.1 |