CVE-2025-54762

CRITICAL 9.3CVE-2025-54762 · Published 28/08/2025 · updated 18/10/2026

In short

CVE-2025-54762 is a CRITICAL (CVSS 9.3) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 0.53%, higher than 45.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to upload arbitrary files and execute OS commands with SYSTEM privileges.

References

jvn.jp/en/jp/JVN99577552
dos-osaka.co.jp/news/2025/08/250827.html

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free