Approved changes feed: RSS · Atom

cpe:2.3:a:samsung_electronics:magicinfo_9_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSamsung Electronics (f9e4199a-4209-5bc8-a4ba-286d87465f43)
ProductMagicinfo 9 Server (013d7ead-5331-58fe-a1f2-08a7db0a1737)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-25203 vulnerable 2026-06-08 07:53:19.498835 Details available
HIGH (7.8)
Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability This issue affects MagicINFO 9 Server: less than 21.1091.1.
Published: 2026-04-10T01:24:07.308Z
Updated: 2026-04-14T03:55:38.631Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25202 vulnerable 2026-06-08 07:53:19.498570 Details available
CRITICAL (9.8)
The database account and password are hardcoded, allowing login with the account to manipulate the database in MagicInfo9 Server.This issue affects MagicINFO 9 Server: less than 21.1090.1.
Published: 2026-02-02T04:49:53.680Z
Updated: 2026-02-26T15:04:39.986Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25201 vulnerable 2026-06-08 07:53:19.498235 Details available
HIGH (8.8)
An unauthenticated user can upload arbitrary files to execute remote code, leading to privilege escalation in MagicInfo9 Server. This issue affects MagicINFO 9 Server: less than 21.1090.1.
Published: 2026-02-02T04:49:38.016Z
Updated: 2026-02-26T15:04:40.332Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25200 vulnerable 2026-06-08 07:53:19.496692 Details available
CRITICAL (9.8)
A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can result in account takeover This issue affects MagicINFO 9 Server: less than 21.1090.1.
Published: 2026-02-02T04:49:13.086Z
Updated: 2026-02-26T15:04:40.615Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54455 vulnerable 2026-06-08 07:33:12.605000 Details available
CRITICAL (9.1)
Use of Hard-coded Credentials vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicINFO 9 Server: less than 21.1080.0.
Published: 2025-07-23T05:27:10.678Z
Updated: 2026-02-26T17:50:21.166Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54454 vulnerable 2026-06-08 07:33:12.604746 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54453 vulnerable 2026-06-08 07:33:12.604486 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54452 vulnerable 2026-06-08 07:33:12.604217 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54451 vulnerable 2026-06-08 07:33:12.603963 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54450 vulnerable 2026-06-08 07:33:12.603610 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54449 vulnerable 2026-06-08 07:33:12.603344 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54448 vulnerable 2026-06-08 07:33:12.602966 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54447 vulnerable 2026-06-08 07:33:12.602710 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54446 vulnerable 2026-06-08 07:33:12.602448 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54445 vulnerable 2026-06-08 07:33:12.602090 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54444 vulnerable 2026-06-08 07:33:12.601602 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54443 vulnerable 2026-06-08 07:33:12.601216 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54442 vulnerable 2026-06-08 07:33:12.600751 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54441 vulnerable 2026-06-08 07:33:12.600360 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54440 vulnerable 2026-06-08 07:33:12.600065 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54439 vulnerable 2026-06-08 07:33:12.599622 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54438 vulnerable 2026-06-08 07:33:12.595225 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4632 vulnerable 2026-06-08 07:29:16.774575 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7399 vulnerable 2026-06-08 06:58:22.085411 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.