PT-2025-38574 · Cmseasy · Cmseasy

Y4Y17 · CVE-2025-55910 · Published 2025-09-19 · Updated 2025-09-19

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions CMSEasy versions prior to 7.7.8.0

Description CMSEasy versions prior to 7.7.8.0 are susceptible to arbitrary file deletion through the database admin.php file.

Recommendations Update to a version newer than 7.7.8.0.

Exploit

Fix

Weakness Enumeration

CWE-459

Related Identifiers

CVE-2025-55910

Affected Products

Cmseasy

References · 5

• 🔥 https://github.com/Y4y17/CVE/blob/main/CMSEasy/Arbitrary%20file%20deletion%20vulnerability.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-55910 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-55910 · Security Note
• https://t.me/CVEtracker/32954 · Telegram Post
• https://twitter.com/CVEnew/status/1969110913648377876 · Twitter Post