M9
Product
MagicINFO 9 Server
by Samsung · last CVE Feb 2, 2026
On CISA KEVExploited in the wild
23
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 20High 3Medium 0Low 0
Watch

Add MagicINFO 9 Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-25201
8.8
0%
Feb 2
An unauthenticated user can upload arbitrary files to execute remote code, leading to privilege escalation in MagicInfo9 Server
Affected: before 21.1090.1
CVE-2025-54441
8.8
15%
Jul 23
Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than…
Affected: before 21.1080.0
CVE-2025-54439
8.8
13%
Jul 23
Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than…
Affected: before 21.1080.0
Showing 3