# cve.now: Samsung Electronics

The newest entries naming Samsung Electronics as an affected vendor (up to 200), of 32 in all, 2 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-25203](https://cve.now/CVE-2026-25203.md): Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability This issue affects MagicINFO 9 Server: l (CVSS 7.8)
- [CVE-2026-25202](https://cve.now/CVE-2026-25202.md): The database account and password are hardcoded, allowing login with the account to manipulate the database in MagicInfo9 Server.This issue (CVSS 9.8)
- [CVE-2026-25201](https://cve.now/CVE-2026-25201.md): An unauthenticated user can upload arbitrary files to execute remote code, leading to privilege escalation in MagicInfo9 Server. (CVSS 8.8)
- [CVE-2026-25200](https://cve.now/CVE-2026-25200.md): A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can r (CVSS 9.8)
- [CVE-2025-53082](https://cve.now/CVE-2025-53082.md): An 'Arbitrary File Deletion' in Samsung DMS(Data Management Server) allows attackers to delete arbitrary files from unintended locations on (CVSS 6.1)
- [CVE-2025-53081](https://cve.now/CVE-2025-53081.md): An 'Arbitrary File Creation' in Samsung DMS(Data Management Server) allows attackers to create arbitrary files in unintended locations on th (CVSS 6.4)
- [CVE-2025-53080](https://cve.now/CVE-2025-53080.md): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Samsung DMS(Data Management Server) allows authenticated a (CVSS 7.1)
- [CVE-2025-53079](https://cve.now/CVE-2025-53079.md): Absolute Path Traversal in Samsung DMS(Data Management Server) allows authenticated attacker (Administrator) to read sensitive files (CVSS 4.9)
- [CVE-2025-53078](https://cve.now/CVE-2025-53078.md): Deserialization of Untrusted Data in Samsung DMS(Data Management Server) allows attackers to execute arbitrary code via write file to system (CVSS 8.0)
- [CVE-2025-53077](https://cve.now/CVE-2025-53077.md): An execution after redirect in Samsung DMS(Data Management Server) allows attackers to execute limited functions without permissions. (CVSS 6.5)
- [CVE-2025-54439](https://cve.now/CVE-2025-54439.md): Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue aff (CVSS 8.8)
- [CVE-2025-54438](https://cve.now/CVE-2025-54438.md): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allow (CVSS 9.8)
- [CVE-2025-54444](https://cve.now/CVE-2025-54444.md): Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue aff (CVSS 9.8)
- [CVE-2025-54443](https://cve.now/CVE-2025-54443.md): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allow (CVSS 9.8)
- [CVE-2025-54442](https://cve.now/CVE-2025-54442.md): Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue aff (CVSS 9.8)
- [CVE-2025-54441](https://cve.now/CVE-2025-54441.md): Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue aff (CVSS 8.8)
- [CVE-2025-54440](https://cve.now/CVE-2025-54440.md): Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue aff (CVSS 9.8)
- [CVE-2025-54447](https://cve.now/CVE-2025-54447.md): Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue aff (CVSS 8.1)
- [CVE-2025-54446](https://cve.now/CVE-2025-54446.md): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allow (CVSS 9.8)
- [CVE-2025-54445](https://cve.now/CVE-2025-54445.md): Improper Restriction of XML External Entity Reference vulnerability in Samsung Electronics MagicINFO 9 Server allows Server Side Request For (CVSS 8.2)
- [CVE-2025-54448](https://cve.now/CVE-2025-54448.md): Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue aff (CVSS 9.8)
- [CVE-2025-54453](https://cve.now/CVE-2025-54453.md): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allow (CVSS 8.8)
- [CVE-2025-54452](https://cve.now/CVE-2025-54452.md): Improper Authentication vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicINFO 9 (CVSS 7.3)
- [CVE-2025-54451](https://cve.now/CVE-2025-54451.md): Improper Control of Generation of Code ('Code Injection') vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This (CVSS 9.8)
- [CVE-2025-54450](https://cve.now/CVE-2025-54450.md): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allow (CVSS 7.2)
- [CVE-2025-54449](https://cve.now/CVE-2025-54449.md): Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue aff (CVSS 9.8)
- [CVE-2025-54455](https://cve.now/CVE-2025-54455.md): Use of Hard-coded Credentials vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicI (CVSS 9.1)
- [CVE-2025-54454](https://cve.now/CVE-2025-54454.md): Use of Hard-coded Credentials vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicI (CVSS 9.1)
- [CVE-2025-34068](https://cve.now/CVE-2025-34068.md): Samsung WLAN AP WEA453e \< 5.2.4.T1 Unauthenticated RCE via command1 and command2 Parameters (CVSS 9.3)
- [CVE-2025-4632](https://cve.now/CVE-2025-4632.md): Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attack (CVSS 9.8, KEV)
- [CVE-2024-7399](https://cve.now/CVE-2024-7399.md): Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attack (CVSS 8.8, KEV)
- [CVE-2020-7811](https://cve.now/CVE-2020-7811.md): Samsung Update Local Privilege Escalation Vulnerability (CVSS 6.2)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/samsung-electronics
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.