CVE-2025-55835
Critical · CVSS 9.8SueamCMS — Unrestricted File Upload leading to Remote Code Execution (CWE-434)
- CVSS
- 9.8
- nvd
- EPSS
- 0.92%
- 56th pct
- KEV
- No
- Class
- other
- CWE-434
Description
File Upload vulnerability in SueamCMS v.0.1.2 allows a remote attacker to execute arbitrary code via the lack of filtering.
Search profile — drives PoC discovery
Symbols file uploadlack of filteringarbitrary code executionupload handlerSueamCMS
Keywords CVE-2025-55835SueamCMSSueamCMS v0.1.2file upload vulnerabilityunrestricted file upload RCESueamCMS exploitUtainlab Vulns
Versions: 0.1.2
Ranked PoCs (1) — best first
Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.
- ★ 0
Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.
References
Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-06T06:30:39.000Z