What is the CVSS score of CVE-2026-25201?

CVE-2026-25201 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Magicinfo 9 Server are affected by CVE-2026-25201?

MagicInfo9 Server installations are vulnerable to unauthenticated remote code execution and privilege escalation, allowing attackers to gain complete system control without credentials.

How to fix or mitigate CVE-2026-25201?

Within 24 hours: Inventory all MagicInfo9 Server installations and versions; isolate affected systems from production networks if version is below 21.1090.1; disable remote file upload functionality if possible. Within 7 days: Implement network segmentation to restrict access to MagicInfo9 Server to authorized users only; deploy WAF rules to block suspicious file upload requests; enable comprehensive logging and monitoring. Within 30 days: Upgrade all affected MagicInfo9 Server instances to version 21.1090.1 or later; conduct forensic analysis for signs of compromise; patch all related systems.

Magicinfo 9 Server CVE-2026-25201

HIGH

Unrestricted Upload of File with Dangerous Type (CWE-434)

2026-02-02 PSIRT@samsung.com

Privilege Escalation Magicinfo 9 Server

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:01 vuln.today

CVE Published

Feb 02, 2026 - 05:16 nvd

HIGH 8.8

DescriptionCVE.org

An unauthenticated user can upload arbitrary files to execute remote code, leading to privilege escalation in MagicInfo9 Server. This issue affects MagicINFO 9 Server: less than 21.1090.1.

AnalysisAI

Remote code execution in MagicInfo 9 Server (versions prior to 21.1090.1) allows unauthenticated attackers to upload arbitrary files without authentication, resulting in complete system compromise with high confidentiality, integrity, and availability impact. The vulnerability enables privilege escalation and requires only user interaction to trigger. No patch is currently available for this critical flaw affecting all vulnerable MagicInfo 9 Server installations.

Technical ContextAI

Classified as CWE-434 (Unrestricted Upload of File with Dangerous Type). Affects Magicinfo 9 Server. An unauthenticated user can upload arbitrary files to execute remote code, leading to privilege escalation in MagicInfo9 Server. This issue affects MagicINFO 9 Server: less than 21.1090.1.

RemediationAI

Monitor vendor advisories for a patch. Validate file types by content. Store uploads outside web root. Restrict network access to the affected service where possible.