Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-25200

A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can result in account takeover

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
samsung.tv_appliance

Description

A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can result in account takeover This issue affects MagicINFO 9 Server: less than 21.1090.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Samsung Electronics MagicINFO 9 Server

Default version status: unaffected

  • 21.1090.1affected

References