Advisories · Technology

Samsung Electronics MagicINFO 9 Server.

Every CVE that names Samsung Electronics MagicINFO 9 Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-25203 CVE record

CVSS 7.8 High

Incorrect default permissions in Samsung Electronics MagicINFO 9 Server
- Samsung Electronics MagicINFO 9 Server
- Broken access control
Not analysed yet 10 Apr 2026
CVE-2026-25202 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Hard-coded credentials in Samsung Electronics MagicINFO 9 Server
- Samsung Electronics MagicINFO 9 Server
- Hard-coded credentials
Not analysed yet 2 Feb 2026
CVE-2026-25201 CVE record

CVSS 8.8 High

Unrestricted file upload in Samsung Electronics MagicINFO 9 Server
- Samsung Electronics MagicINFO 9 Server
- Unrestricted file upload
Not analysed yet 2 Feb 2026
CVE-2026-25200 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Unrestricted file upload in Samsung Electronics MagicINFO 9 Server
- Samsung Electronics MagicINFO 9 Server
- Unrestricted file upload
Not analysed yet 2 Feb 2026
CVE-2025-54439 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Unrestricted file upload in Samsung Electronics MagicINFO 9 Server
- Samsung Electronics MagicINFO 9 Server
- Unrestricted file upload
Not analysed yet 23 Jul 2025
CVE-2025-54438 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Path traversal in Samsung Electronics MagicINFO 9 Server
- Samsung Electronics MagicINFO 9 Server
- Path traversal
Not analysed yet 23 Jul 2025
CVE-2025-54444 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Unrestricted file upload in Samsung Electronics MagicINFO 9 Server
- Samsung Electronics MagicINFO 9 Server
- Unrestricted file upload
Not analysed yet 23 Jul 2025
CVE-2025-54443 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Path traversal in Samsung Electronics MagicINFO 9 Server
- Samsung Electronics MagicINFO 9 Server
- Path traversal
Not analysed yet 23 Jul 2025
CVE-2025-54442 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Unrestricted file upload in Samsung Electronics MagicINFO 9 Server
- Samsung Electronics MagicINFO 9 Server
- Unrestricted file upload
Not analysed yet 23 Jul 2025
CVE-2025-54441 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Unrestricted file upload in Samsung Electronics MagicINFO 9 Server
- Samsung Electronics MagicINFO 9 Server
- Unrestricted file upload
Not analysed yet 23 Jul 2025
CVE-2025-54440 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Unrestricted file upload in Samsung Electronics MagicINFO 9 Server
- Samsung Electronics MagicINFO 9 Server
- Unrestricted file upload
Not analysed yet 23 Jul 2025
CVE-2025-54447 CVE record

CVSS 8.1 High

Unrestricted file upload in Samsung Electronics MagicINFO 9 Server
- Samsung Electronics MagicINFO 9 Server
- Unrestricted file upload
Not analysed yet 23 Jul 2025
CVE-2025-54446 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Path traversal in Samsung Electronics MagicINFO 9 Server
- Samsung Electronics MagicINFO 9 Server
- Path traversal
Not analysed yet 23 Jul 2025
CVE-2025-54445 CVE record

CVSS 8.2 HighCritical · CVSS 7+ and EPSS

XML external entity injection in Samsung Electronics MagicINFO 9 Server
- Samsung Electronics MagicINFO 9 Server
- XML external entities (XXE)
Not analysed yet 23 Jul 2025
CVE-2025-54448 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Unrestricted file upload in Samsung Electronics MagicINFO 9 Server
- Samsung Electronics MagicINFO 9 Server
- Unrestricted file upload
Not analysed yet 23 Jul 2025
CVE-2025-54453 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Path traversal in Samsung Electronics MagicINFO 9 Server
- Samsung Electronics MagicINFO 9 Server
- Path traversal
Not analysed yet 23 Jul 2025
CVE-2025-54452 CVE record

CVSS 7.3 High

Improper authentication in Samsung Electronics MagicINFO 9 Server
- Samsung Electronics MagicINFO 9 Server
- Authentication bypass
Not analysed yet 23 Jul 2025
CVE-2025-54451 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Code injection in Samsung Electronics MagicINFO 9 Server
- Samsung Electronics MagicINFO 9 Server
- Code injection
Not analysed yet 23 Jul 2025
CVE-2025-54450 CVE record

CVSS 7.2 High

Path traversal in Samsung Electronics MagicINFO 9 Server
- Samsung Electronics MagicINFO 9 Server
- Path traversal
Not analysed yet 23 Jul 2025
CVE-2025-54449 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Unrestricted file upload in Samsung Electronics MagicINFO 9 Server
- Samsung Electronics MagicINFO 9 Server
- Unrestricted file upload
Not analysed yet 23 Jul 2025
CVE-2025-54455 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Hard-coded credentials in Samsung Electronics MagicINFO 9 Server
- Samsung Electronics MagicINFO 9 Server
- Hard-coded credentials
Not analysed yet 23 Jul 2025
CVE-2025-54454 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Hard-coded credentials in Samsung Electronics MagicINFO 9 Server
- Samsung Electronics MagicINFO 9 Server
- Hard-coded credentials
Not analysed yet 23 Jul 2025
CVE-2025-4632 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Path traversal in Samsung Electronics MagicINFO 9 Server
- Samsung Electronics MagicINFO 9 Server
- Path traversal
Not analysed yet 13 May 2025
CVE-2024-7399 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Path traversal in Samsung Electronics MagicINFO 9 Server
- Samsung Electronics MagicINFO 9 Server
- Path traversal
- Unrestricted file upload
Not analysed yet 9 Aug 2024