How to fix CVE-2025-14014?

Within 24 hours: Identify all systems running NTN Smart Panel and isolate them from critical networks if possible; notify IT security team and relevant business unit owners. Within 7 days: Implement compensating controls (see below), conduct vulnerability scanning to identify exposed instances, and establish monitoring for suspicious file upload activity. Within 30 days: Evaluate alternative solutions or request vendor patch timeline; document all instances of the software and develop detailed remediation plan with vendor engagement.

CVE-2025-14014

CRITICAL

2026-02-12 [email protected]

9.8

CVSS 3.1

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:02 vuln.today

CVE Published

Feb 12, 2026 - 15:16 nvd

CRITICAL 9.8

Description

Unrestricted Upload of File with Dangerous Type vulnerability in NTN Information Processing Services Computer Software Hardware Industry and Trade Ltd. Co. Smart Panel allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Smart Panel: before 20251215.

Analysis

Unrestricted file upload in NTN software enables web shell upload and RCE.

Technical Context

CWE-434 missing file type validation.

Affected Products

['NTN software']

Remediation

Apply vendor patch.

Priority Score

Low Medium High Critical

KEV: 0

EPSS: +0.1

CVSS: +49

POC: 0

CVE-2025-14014 vulnerability details – vuln.today

Back

CVE-2025-14014

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Technical Context

Affected Products

Remediation

Priority Score

Share

CVE-2025-14014

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Technical Context

Affected Products

Remediation

Priority Score

Share

External POC / Exploit Code