CVE-2025-6076 Information

Description

Partner Software’s Partner Software application and Partner Web application do not sanitize files uploaded on the eports\ tab allowing an authenticated attacker to upload a malicious file and compromise the device. By default the software runs as SYSTEM heightening the severity of the vulnerability.

Reference

https://partnersoftware.com/resources/software-release-info-4-32/

CNNVD-202508-119 (Published: 2025-08-02)

Share on: