CVE-2026-25203

CWE-276 — Incorrect Default Permissions4 documents4 sources

Severity

7.8HIGH

EPSS

0.0%

top 98.97%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Samsung Electronics Magicinfo 9 Server

Timeline

PublishedApr 10

Description

Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability This issue affects MagicINFO 9 Server: less than 21.1091.1.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages1 packages

▶CVEListV5samsung_electronics/magicinfo_9_server21.1091.1

🔴Vulnerability Details

VulDB

Samsung Electronics MagicINFO 9 Server 21.1091.1 default permission↗2026-04-10

▶

GHSA

GHSA-wvrj-cr9g-752f: Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability This issue affects MagicINFO 9 Server: less than 2↗2026-04-10

▶

CVEList

CVE-2026-25203: Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability This issue affects MagicINFO 9 Server: less than 2↗2026-04-10

▶