CVE-2024-7399
KEV High · CVSS 8.8- CVSS
- 8.8
- nvd
- EPSS
- —
- KEV
- Listed
- 2026-04-24
- Class
- other
- CWE-22, CWE-434, CWE-22
Description
Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority.
References
Status: profiled · ingested 2026-10-02T00:00:02.000Z