VULNERABILITY INTELLIGENCE

CVE-2025-46080

CVSS score5.3 MEDIUM

EPSS probability0.43%

CISA KEVNot currently listed

Published2025-05-29

Last modified2026-06-17

Description

HuoCMS V3.5.1 has a File Upload Vulnerability. An attacker can exploit this flaw to bypass whitelist restrictions and craft malicious files with specific suffixes, thereby gaining control of the server.