← Back to browse · API

CVE-2025-69828

Severity
CRITICAL
CVSS
10.0
EPSS
0.00486
Risk score
40.17
CISA KEV
No
PoC
No
Published
2026-01-22
Modified
2026-01-22
First seen
2026-08-07
Aliases
EUVD-2026-3882, GHSA-H65F-H2HP-PV65
Products
n/a:n/a n/a
Sources
euvd EUVD-2026-3882

Description

File Upload vulnerability in TMS Global Software TMS Management Console v.6.3.7.27386.20250818 allows a remote attacker to execute arbitrary code via the Logo upload in /Customer/AddEdit

References