PT-2025-40313 · Markany · Markany Safepc Enterprise

Published 2025-10-02 · Updated 2025-10-02 · CVE-2025-11020

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MarkAny SafePC Enterprise versions 5.x.x and 7.0.0 through 7.0.1

Description An attacker can obtain server information using a Path Traversal flaw, potentially leading to SQL Injection. This also involves a possible Unrestricted Upload of File with Dangerous Type issue. The vulnerability affects SafePC Enterprise on Windows and Linux operating systems.

Recommendations Update MarkAny SafePC Enterprise to version 7.0.1 or later. Update MarkAny SafePC Enterprise to a version later than 5.x.x.

Fix

RCE

Path traversal

Unrestricted File Upload

SQL injection

Weakness Enumeration

CWE-22

CWE-434

CWE-89

Related Identifiers

CVE-2025-11020

Affected Products

Markany Safepc Enterprise

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-11020 · Security Note
• https://t.me/cveNotify/137140 · Telegram Post
• https://t.me/CVEtracker/33900 · Telegram Post
• https://twitter.com/CVEnew/status/1973626771183407388 · Twitter Post
• https://twitter.com/CveFindCom/status/1973624635762634914 · Twitter Post
• https://markany.com/enterprisesecurity?utm_campaign=markany_sa&utm_source=google_pc&utm_medium=gsa_pc&utm_term=cybersecurity&utm_content=&gad_source=1&gad_campaignid=21853187406&gbraid=0AAAAADOrb0lM8ZHyDytvnVwj9T--km9aM&gclid=Cj0KCQjwovPGBhDxARIsAFhgkwSh0F9hnsAoRTS8OnFI3KcF4_UMarYchq0uP5V1DiSQyKKVLdZPJNYaAiBuEALw_wcB · Note
• https://twitter.com/offseq/status/1973652119589708244 · Twitter Post