What is the CVSS score of CVE-2025-14014?

CVE-2025-14014 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

How to fix or mitigate CVE-2025-14014?

Within 24 hours: Identify all systems running NTN Smart Panel and isolate them from critical networks if possible; notify IT security team and relevant business unit owners. Within 7 days: Implement compensating controls (see below), conduct vulnerability scanning to identify exposed instances, and establish monitoring for suspicious file upload activity. Within 30 days: Evaluate alternative solutions or request vendor patch timeline; document all instances of the software and develop detailed remediation plan with vendor engagement.

CVE-2025-14014

CRITICAL

Unrestricted Upload of File with Dangerous Type (CWE-434)

2026-02-12 iletisim@usom.gov.tr

File Upload

9.8

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:02 vuln.today

CVE Published

Feb 12, 2026 - 15:16 nvd

CRITICAL 9.8

DescriptionNVD

Unrestricted Upload of File with Dangerous Type vulnerability in NTN Information Processing Services Computer Software Hardware Industry and Trade Ltd. Co. Smart Panel allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Smart Panel: before 20251215.

AnalysisAI

Unrestricted file upload in NTN software enables web shell upload and RCE.

Technical ContextAI

CWE-434 missing file type validation.

Affected ProductsAI

NTN software

RemediationAI

Apply vendor patch.

CVE-2025-14014 vulnerability details – vuln.today

Back

CVE-2025-14014

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

Affected ProductsAI

RemediationAI

Share

External POC / Exploit Code