CVE-2025-35060

Publication date

2025-10-09 20:22:10

Family

cisa-cg

State

PUBLISHED

Description

Newforma Info Exchange (NIX) provides a Send a File Transfer feature that allows a remote, authenticated attacker to upload SVG files that contain JavaScript or other content that may be executed or rendered by a web browser using a mobile user agent.