PT-2025-52526 · Flatnux · Flatnux

Published 2025-12-19 · Updated 2025-12-20 · CVE-2023-53956

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Flatnux version 2021-03.25

Description The software contains an authenticated file upload issue that permits administrative users to upload arbitrary PHP files via the file manager. An attacker with administrative access can upload malicious PHP scripts to the web root directory, potentially enabling remote code execution on the server.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Fix

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2023-53956

Affected Products

Flatnux

References · 9

• 🔥 https://exploit-db.com/exploits/51295 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-53956 · Security Note
• https://twitter.com/VulmonFeeds/status/2002143452134244360 · Twitter Post
• https://t.me/CVEtracker/40318 · Telegram Post
• https://vulncheck.com/advisories/flatnux-authenticated-file-upload-remote-code-execution · Note
• https://twitter.com/CveFindCom/status/2002131665758323182 · Twitter Post
• http://flatnux.altervista.org/flatnux.html · Note
• https://twitter.com/CVEnew/status/2002466765339496810 · Twitter Post
• https://twitter.com/TheHackerWire/status/2002145010075222108 · Twitter Post