CVE-2025-14532 — Remote Code Execution via Unrestricted File Upload in DobryCMS

CVE-2025-14532

Remote Code Execution via Unrestricted File Upload in DobryCMS PUBLISHED

Description (CNA)

DobryCMS's upload file functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can result in Remote Code Execution. This issue was fixed in versions above 5.0.

Affected (CNA)

Vendor / product	Versions
Studio Fabryka / DobryCMS	affected 1.0 through 1.; affected 2.0 through 2.; affected 5.0

CWE

CWE-434

References

https://cert.pl/posts/2026/03/CVE-2025-12462/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.