CVE-2025-14532

Publication date

2026-03-02 12:49:05

Family

CERT-PL

State

PUBLISHED

Description

DobryCMSs upload file functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can result in Remote Code Execution. This issue was fixed in versions above 5.0.