CVE-2025-14014CWE-434

Insecure File Upload in NTN Informatics' Smart Panel

Critical · published February 12, 2026

CVSS v3.1
9.8
EPSS
0%
Percentile
37.0
In the wild
Unconfirmed
What it is

Unrestricted Upload of File with Dangerous Type vulnerability in NTN Information Processing Services Computer Software Hardware Industry and Trade Ltd. Co. Smart Panel allows Accessing Functionality Not Properly Constrained by ACLs.

This issue affects Smart Panel: before 20251215.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00437 · 37.0th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2026-02-12T13:58Z
EPSS history
Timeline
  • 12 FEB 13:58Z
    Insecure File Upload in NTN Informatics' Smart Panel
    cvelistv5