CVE-2025-54445

CRITICAL 9.8CVE-2025-54445 · Published 23/07/2025 · updated 17/06/2026

In short

CVE-2025-54445 is a CRITICAL (CVSS 9.8) vulnerability affecting magicinfo 9 server (samsung).
Chance of exploitation in the next 30 days (EPSS): 17.7%, higher than 97.2% of all vulnerabilities.
Fix: update to 21.1080.0 or later.

Package	Affected versions	Patched versions
magicinfo 9 server samsung	`< 21.1080.0`	`21.1080.0`

Description

Improper Restriction of XML External Entity Reference vulnerability in Samsung Electronics MagicINFO 9 Server allows Server Side Request Forgery.This issue affects MagicINFO 9 Server: less than 21.1080.0.

References

security.samsungtv.com/securityUpdates · Vendor Advisory

More vulnerabilities in magicinfo 9 server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

magicinfo 9 server

samsung

< 21.1080.0

21.1080.0

More vulnerabilities in magicinfo 9 server

See all →