PT-2026-27006 · Admin Express · Adminexpress

Published 2026-03-22 · Updated 2026-03-22 · CVE-2019-25618

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions AdminExpress version 1.2.5

Description A denial of service issue allows local attackers to crash the application by submitting oversized input through the System Compare feature. Attackers can paste a large buffer of characters into the Folder Path field and trigger the comparison function to cause the application to become unresponsive or crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-73

Related Identifiers

CVE-2019-25618

Affected Products

Adminexpress

References · 4

• 🔥 https://exploit-db.com/exploits/46711 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25618 · Security Note
• https://admin-express.en.softonic.com · Note
• https://vulncheck.com/advisories/adminexpress-denial-of-service-via-system-compare · Note