PT-2026-22581 · Dobrycms · Dobrycms

Dawid Radziński · Publicado 2026-03-02 · Atualizado 2026-03-07 · CVE-2025-14532

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DobryCMS versions prior to 5.0

Description The software’s file upload functionality allows unauthenticated remote attackers to upload files of any type and extension without restriction. This can lead to Remote Code Execution.

Recommendations Update to version 5.0 or later.

Correção

RCE

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2025-14532

Produtos afetados

Dobrycms

Referências · 9

• https://cert.pl/posts/2026/03/CVE-2025-12462 · Nota
• https://osv.dev/vulnerability/CVE-2025-14532 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2028478025843581230 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-14532 · Nota de Segurança
• https://twitter.com/cracbot/status/2029874784281194794 · Publicação no Twitter
• https://t.me/CVEtracker/46118 · Publicação no Telegram
• https://t.me/cveNotify/153716 · Publicação no Telegram
• https://twitter.com/infoflowcloud/status/2028479407854129589 · Publicação no Twitter
• https://twitter.com/cracbot/status/2030237084792082917 · Publicação no Twitter