CVE-2025-4632

Samsung MagicINFO 9 Server Path Traversal Vulnerability

9.8
CVSS 3.1
24.3 %
EPSS (current)
2025-05-22
KEV addition
No
Ransomware

Timeline

Publication, first public exploit and KEV addition on a day axis.

Key facts

Vendor / product: Samsung / MagicINFO 9 Server

Published: 2025-05-13 · Due (CISA): 2025-06-12

CWE: CWE-22 · EU list: no

Exploit references (metadata only)

SourceReferenceTitleDate
nucleihttp/cves/2025/CVE-2025-4632.yamlSamsung MagicINFO 9 Server - File Upload & Remote Code Execution–

References only — no downloads or instructions.

Sources