Samsung Electronics vulnerabilities

CVEs per yearBy the year they were published

1. 20201
2. 20241
3. 202526
4. 20264

Known exploitedNewest addition to KEV first

• CVE-2024-7399

  Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write…

  Samsung Electronics · MagicINFO 9 Server

  ExploitedHigh8.8
• CVE-2025-4632

  Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to write…

  Samsung Electronics · MagicINFO 9 Server

  ExploitedCritical9.8

Newest CVEs

• CVE-2026-25203

  Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability This issue affects MagicINFO 9 Server: less than 21.1091.1.

  Samsung Electronics · MagicINFO 9 Server

  High7.8
• CVE-2026-25202

  The database account and password are hardcoded, allowing login with the account to manipulate the database in MagicInfo9 Server.This issue affects MagicINFO 9…

  Samsung Electronics · MagicINFO 9 Server

  Critical9.8
• CVE-2026-25201

  An unauthenticated user can upload arbitrary files to execute remote code, leading to privilege escalation in MagicInfo9 Server. This issue affects MagicINFO 9…

  Samsung Electronics · MagicINFO 9 Server

  High8.8
• CVE-2026-25200

  A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can result in account…

  Samsung Electronics · MagicINFO 9 Server

  Critical9.8
• CVE-2025-53082

  An 'Arbitrary File Deletion' in Samsung DMS(Data Management Server) allows attackers to delete arbitrary files from unintended locations on the filesystem.…

  Samsung Electronics · Data Management Server

  Medium6.1
• CVE-2025-53081

  An 'Arbitrary File Creation' in Samsung DMS(Data Management Server) allows attackers to create arbitrary files in unintended locations on the filesystem.…

  Samsung Electronics · Data Management Server

  Medium6.4
• CVE-2025-53080

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Samsung DMS(Data Management Server) allows authenticated attackers to create…

  Samsung Electronics · Data Management Server

  High7.1
• CVE-2025-53079

  Absolute Path Traversal in Samsung DMS(Data Management Server) allows authenticated attacker (Administrator) to read sensitive files

  Samsung Electronics · Data Management Server

  Medium4.9
• CVE-2025-53078

  Deserialization of Untrusted Data in Samsung DMS(Data Management Server) allows attackers to execute arbitrary code via write file to system

  Samsung Electronics · Data Management Server

  High8.0
• CVE-2025-53077

  An execution after redirect in Samsung DMS(Data Management Server) allows attackers to execute limited functions without permissions. An attacker could…

  Samsung Electronics · DMS(Data Management Server)

  Medium6.5