CVE-2025-0471

Unrestricted Upload of File with Dangerous Type vulnerability in PMB platform

Unrestricted file upload vulnerability in the PMB platform, affecting versions 4.0.10 and above. This vulnerability could allow an attacker to upload a file to gain remote access to the machine, being able to access, modify and execute commands freely.

Affected

PMB Services · PMB platform

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1 INCIBE

9.9 CRITICALCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS

0.58% chance of exploitation in the next 30 days, 47th percentile

Published

2025-01-16

Proof-of-concept exploits (1)

• phycox69/CVE0★ · 2026-03-19

Security advisories

• https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-pmb-platform

References

• CVE Record
• NVD entry

Related

• CVE-2025-0472
• CVE-2025-0473
• CVE-2025-41069