Critical
CVSS 9.3
Overview
The affected products could allow an unauthenticated attacker to overwrite files and execute arbitrary code.
CVE-2025-49153
The affected products could allow an unauthenticated attacker to overwrite files...
Risk analysis
This vulnerability is rated 🔴 CRITICAL.
- CVSS: 9.3 (CRITICAL)
- Detected tags: rce, unauth_access (tag impact: VERY HIGH)
Recommended actions:
- Patch/upgrade immediately (remote code execution).
- Reduce exposure (WAF/segmentation), minimize attack surface.
- Enforce authentication/authorization; reduce default endpoint exposure.