CVE-2025-14182

CRITICO 9.8CVE-2025-14182 · Published 07/12/2025 · updated 07/10/2026

In breve

CVE-2025-14182 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda media convergence system (sobey).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.44%, superiore al 38.3% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
media convergence system sobey	`= 2.0= 2.1`	No fix yet

Description

A vulnerability has been found in Sobey Media Convergence System 2.0/2.1. This vulnerability affects unknown code of the file /sobey-mchEditor/watermark/upload. The manipulation of the argument File leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

References

hacker-routing/cve · Broken Link
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free