PT-2026-5607 · Samsung · Magicinfo 9 Server

CVE-2026-25202 · Publicado 2026-02-02 · Atualizado 2026-03-10

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MagicINFO 9 Server versions prior to 21.1090.1

Description The database account and password are hardcoded, which allows login with the account to manipulate the database. This compromises the integrity and confidentiality of the database.

Recommendations Update MagicINFO 9 Server to version 21.1090.1 or later.

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

BDU:2026-01068

CVE-2026-25202

Produtos afetados

Magicinfo 9 Server

Referências · 14

• https://twitter.com/CveFindCom/status/2018205550098493757 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-25202 · Aviso do Fabricante
• https://twitter.com/TheHackerWire/status/2018193252680442353 · Publicação no Twitter
• https://security.samsungtv.com/securityUpdates · Aviso do Fabricante
• https://t.me/cveNotify/150536 · Publicação no Telegram
• https://twitter.com/SystemTek_UK/status/2018327923061645445 · Publicação no Twitter
• https://t.me/cveNotify/154958 · Publicação no Telegram
• https://twitter.com/cracbot/status/2020090205987041578 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-25202 · Nota de Segurança
• https://thehackerwire.com/magicinfo-9-server-hardcoded-db-creds-expose-data · Nota
• https://twitter.com/vuldb/status/2018237256340013455 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2026-01068 · Nota de Segurança
• https://t.me/CVEtracker/43452 · Publicação no Telegram
• https://twitter.com/PurpleOps_io/status/2019261157324804417 · Publicação no Twitter