What’s Vulnerable › Vulnerabilities

CVE-2025-14014: Insecure File Upload in NTN Informatics' Smart Panel

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-02-12 · updated 2026-06-17
• Weakness: CWE-434

Description

Unrestricted Upload of File with Dangerous Type vulnerability in NTN Information Processing Services Computer Software Hardware Industry and Trade Ltd. Co. Smart Panel allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Smart Panel: before 20251215.

Affected products

• NTN Information Processing Services Computer Software Hardware Industry and Trade Ltd. Co. Smart Panel: before 20251215 — fixed in 20251215

How to fix

Upgrade to a fixed version: NTN Information Processing Services Computer Software Hardware Industry and Trade Ltd. Co. Smart Panel 20251215. Check the vendor advisory for mitigations.

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0064
• https://www.usom.gov.tr/bildirim/tr-26-0064

Get alerted when CVE-2025-14014 or the next vulnerability affects your stack