PT-2025-39168 · Inka.Net · Inka.Net

Published 2025-09-23 · Updated 2025-09-24 · CVE-2025-9846

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Inka.Net versions prior to 6.7.1

Description A flaw exists in Inka.Net that allows for command injection through the unrestricted upload of files with dangerous types. This issue could potentially allow an attacker to execute arbitrary commands on the system.

Recommendations Update Inka.Net to version 6.7.1 or later.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2025-9846

Affected Products

Inka.Net

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-9846 · Security Note
• https://t.me/cveNotify/136146 · Telegram Post
• https://twitter.com/NightfallCVE/status/1970591593045307483 · Twitter Post
• https://usom.gov.tr/bildirim/tr-25-0288 · Note
• https://twitter.com/CVEnew/status/1970621812771086662 · Twitter Post
• https://twitter.com/CveFindCom/status/1970475530882359400 · Twitter Post
• https://t.me/CVEtracker/33166 · Telegram Post
• https://twitter.com/offseq/status/1970707627001729511 · Twitter Post