Login Request a demo
M9
Product
MagicINFO 9 Server
by Samsung Electronics · last CVE Apr 10, 2026
On CISA KEVExploited in the wild
6
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities6In the news3Timeline
Severity mix
Critical 4High 2Medium 0Low 0
Severity
All severities6Critical4High2Medium0Low0
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add MagicINFO 9 Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-4632
In wildKEV
9.8
24%
May 13
Samsung MagicINFO 9 Server Path Traversal Vulnerability
Affected: before 21.1052
CVE-2024-7399
In wildKEV
9.8
92%
Aug 9
Samsung MagicINFO 9 Server Path Traversal Vulnerability
Affected: before 21.1050
CVE-2026-25202
9.8
0%
Feb 2
The database account and password are hardcoded, allowing login with the account to manipulate the database in MagicInfo9 Server.This issue affects MagicINFO 9 Server: less than…
Affected: 21.1090.1
CVE-2026-25200
9.8
1%
Feb 2
A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can result in account takeover This issue…
Affected: 21.1090.1
CVE-2026-25201
8.8
0%
Feb 2
An unauthenticated user can upload arbitrary files to execute remote code, leading to privilege escalation in MagicInfo9 Server
Affected: 21.1090.1
CVE-2026-25203
7.8
0%
Apr 10
Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability This issue affects MagicINFO 9 Server: less than 21.1091.1
Affected: 21.1091.1
Showing 6