CVE-2025-52691
KEV · ransomware Critical · CVSS 10.0- CVSS
- 10.0
- nvd
- EPSS
- 85.7%
- 100th pct
- KEV
- Listed
- ransomware
- Class
- other
- CWE-434
Description
Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.
References
Status: profiled · ingested 2026-10-07T18:00:43.000Z