CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2025-11020: SafePC Enterprise V7.0.* (V7.0.YYYY.MM.DD) to before V7.0.1, V5.*.*

CVE-2025-11020. CVSS 3.1 base score 8.8 (HIGH, Source advisory). EPSS 0.00301 (percentile 0.21074), scored 11-Oct-2026.

Affected technology

SafePC Enterprise · V7.0.* (V7.0.YYYY.MM.DD) to before V7.0.1, V5.*.*
MarkAny

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 4.0): Adjacent network · No privileges required · No user interaction required

What an attacker can do

An attacker can obtain server information using Path Traversal vulnerability to conduct SQL Injection, which possibly exploits Unrestricted Upload of File with Dangerous Type vulnerability in MarkAny SafePC Enterprise on Windows, Linux.This issue affects SafePC Enterprise: V7.0.* (V7.0.YYYY.MM.DD) before V7.0.1, and V5.*.*. Source advisory’s CVSS 4.0 assessment (base score 8.7/10) rates confidentiality, integrity and availability impact as high.

Published

CWE
CWE-22, CWE-89, CWE-434
CCR priority
35.3 /100 (P4)
CVSS 3.1
8.8 /10 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.00301 · percentile 0.21074 · 2026-10-11
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-11020.html