{"id":"CVE-2025-14014","aliases":["EUVD-2025-207401","GHSA-fwjr-9qgx-rpmm"],"status":"published","title":"Insecure File Upload in NTN Informatics' Smart Panel","description":"Unrestricted Upload of File with Dangerous Type vulnerability in NTN Information Processing Services Computer Software Hardware Industry and Trade Ltd. Co. Smart Panel allows Accessing Functionality Not Properly Constrained by ACLs.\n\nThis issue affects Smart Panel: before 20251215.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00427,"percentile":0.37449,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-434"],"published":"2026-02-12T13:58:36Z","modified":"2026-06-17T08:35:10Z","products":[{"vendor":"ntn information processing services computer software hardware industry and trade ltd. co.","product":"smart panel"}],"references":[{"url":"https://www.usom.gov.tr/bildirim/tr-26-0064","tags":["government-resource","broken-link"]},{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0064","tags":["government-resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-14014"},{"url":"https://github.com/advisories/GHSA-fwjr-9qgx-rpmm"}],"sources":{"cve":[{"id":"CVE-2025-14014","title":"Insecure File Upload in NTN Informatics' Smart Panel","description":"Unrestricted Upload of File with Dangerous Type vulnerability in NTN Information Processing Services Computer Software Hardware Industry and Trade Ltd. Co. Smart Panel allows Accessing Functionality Not Properly Constrained by ACLs.\n\nThis issue affects Smart Panel: before 20251215.","status":"published","published":"2026-02-12T13:58:36.574Z","modified":"2026-06-04T06:30:46.119Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:32:28.943062Z"}],"euvd":[{"id":"EUVD-2025-207401","description":"Unrestricted Upload of File with Dangerous Type vulnerability in NTN Information Processing Services Computer Software Hardware Industry and Trade Ltd. Co. Smart Panel allows Accessing Functionality Not Properly Constrained by ACLs.\n\nThis issue affects Smart Panel: before 20251215.","status":"published","published":"2026-02-12T13:58:36Z","modified":"2026-06-04T06:30:46Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T18:20:53.780241Z"}],"ghsa":[{"id":"GHSA-fwjr-9qgx-rpmm","title":"Unrestricted Upload of File with Dangerous Type vulnerability in NTN Information Processing...","description":"Unrestricted Upload of File with Dangerous Type vulnerability in NTN Information Processing Services Computer Software Hardware Industry and Trade Ltd. Co. Smart Panel allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Smart Panel: before 20251215.","status":"published","published":"2026-02-12T15:32:48Z","modified":"2026-06-04T09:31:38Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T15:08:32.060893Z"}],"nvd":[{"id":"CVE-2025-14014","description":"Unrestricted Upload of File with Dangerous Type vulnerability in NTN Information Processing Services Computer Software Hardware Industry and Trade Ltd. Co. Smart Panel allows Accessing Functionality Not Properly Constrained by ACLs.\n\nThis issue affects Smart Panel: before 20251215.","status":"published","published":"2026-02-12T15:16:02.657Z","modified":"2026-06-17T08:35:10.357Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:12:00.273026Z"}]}}