Vulnerability intelligence
CVE-2025-4632
Samsung MagicINFO 9 Server Path Traversal Vulnerability
Samsung MagicINFO 9 Server
Samsung MagicINFO 9 Server contains a path traversal vulnerability that allows an attacker to write arbitrary file as system authority.
CVSS Score
9.8
Critical
EPSS — Exploit Probability
—
Awaiting FIRST.org data
Exploitation
Confirmed in the wild
KEV since 2025-05-22
Remediation
unknown
Federal deadline 2025-06-12
CISA required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Deadline for federal agencies: 2025-06-12.
1 article across 1 outlet · first covered Oct 1, 2026 · latest Oct 1, 2026
Coverage timeline
-
AI Fuels Exploitation as Model Flaw Enables Remote Code Executionthehackernews.com · Oct 1, 2026