CVE-2025-52691

CriticalKnown ExploitedRansomware

Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail…

CSA·CWE-434·Published 2025-12-29

CVSS

10.0

EPSS

0.86

KEV

Yes

Exploits

Attributed to:Storm-1175

cve.orgen

190 chars

Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.

NVDen

190 chars

Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.

La explotación exitosa de la vulnerabilidad podría permitir a un atacante no autenticado subir archivos arbitrarios a cualquier ubicación en el servidor de correo, potencialmente habilitando la ejecución remota de código.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	10.0	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
3.1	Secondary	NVD	10.0	3.9	6.0	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H