PT-2026-43390 · Git · Public-References

CVE-2025-50329 · Published 2026-05-26 · Updated 2026-07-23

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ConeXware, Inc Power Archiver versions prior to 22.00.12 Drupal (affected versions not specified)

Description An issue in the powerarc.exe executable allows a remote attacker to escalate privileges and execute arbitrary code. Separately, a SQL injection exists in Drupal that allows for database compromise without requiring authentication. SQL injection is a technique where an attacker inserts malicious SQL code into a query, allowing them to manipulate the database.

Recommendations Update ConeXware, Inc Power Archiver to version 22.00.12 or later. Apply the latest security patches to Drupal to resolve the SQL injection issue.

Exploit

Fix

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

CVE-2025-50329

Affected Products

Public-References

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/50xxx/CVE-2025-50329.json · Exploit
• 🔥 https://github.com/OV-0-VO/Public-references/blob/main/CVE-2025-50329.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-50329 · Security Note
• https://osv.dev/vulnerability/CVE-2025-50329 · Vendor Advisory
• https://twitter.com/ZeroDayDevApp/status/2059311227575144556 · Twitter Post
• https://github.com/OV-0-VO/Public-references/commit/20437207859288ad1502fed2caebc38be27a3450 · Note
• https://t.me/cveNotify/217756 · Telegram Post
• https://powerarchiver.com · Note