Critical severity9.8NVD Advisory· Published Mar 2, 2026· Updated Jun 17, 2026

CVE-2025-14532

Description

DobryCMS's upload file functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can result in Remote Code Execution.

This issue was fixed in versions above 5.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Studiofabryka/Dorbycms
cpe:2.3:a:studiofabryka:dorbycms:*:*:*:*:*:*:*:*
Range: >=1.0,<=5.0
DobryCMS/DobryCMSllm-fuzzy
Range: >5.0
Studio Fabryka/Dobrycmsv5
Range: 1.0

Patches

Vulnerability mechanics

References

cert.pl/posts/2026/03/CVE-2025-12462/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000