VULNERABILITY INTELLIGENCE

CVE-2025-14532

CVSS score9.3 CRITICAL
EPSS probability0.62%
CISA KEVNot currently listed
Published2026-03-02
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

Description

DobryCMS's upload file functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can result in Remote Code Execution. This issue was fixed in versions above 5.0.

Weakness classification

  • CWE-434: Unrestricted Upload of File with Dangerous Type

Primary references