CVE-2025-46080

5.3 mediumEPSS 0.4%

Medium (5.3) in huocms huocms. EPSS 0.4% chance of exploitation in the next 30 days.

HuoCMS V3.5.1 has a File Upload Vulnerability. An attacker can exploit this flaw to bypass whitelist restrictions and craft malicious files with specific suffixes, thereby gaining control of the server.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 37% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2025-05-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

huocms:huocms

References

https://github.com/yggcwhat/CVE-2025-46080/
https://github.com/yggcwhat/test2/blob/main/README.md

Check your stack JSON