CVE-2025-70995

An issue in Aranda Service Desk Web Edition (ASDK API 8.6) allows authenticated attackers to achieve remote code execution due to improper validation of uploaded files. An authenticated user can upload a crafted web.config file by sending a crafted POST request to /ASDKAPI/api/v8.6/item/addfile, which is processed by the ASP.NET runtime. The uploaded configuration file alters the execution context of the upload directory, enabling compilation and execution of attacker-controlled code (e.g., generation of an .aspx webshell). This allows remote command execution on the server without user interaction beyond authentication, impacting both On-Premise and SaaS deployments. The vendor has fixed the issue in Aranda Service Desk V8 8.30.6.

• CWE-94

• https://docs.arandasoft.com/asdk-api/pages/V1.9/descripcion/adjuntar_archivos.html
• https://docs.arandasoft.com/asdk-v8-release-notes/assets/asdk-v8-release-notes.pdf
• https://github.com/0xcronos/CVE/blob/main/CVE-2025-70995/README.md

Published

Mar 5, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-70982Incorrect access control in the importUser function of Sprin…9.9
• CVE-2025-70983Incorrect access control in the authRoutes function of Sprin…9.9
• CVE-2025-70985Incorrect access control in the update function of RuoYi v4.…9.1
• CVE-2025-70986Incorrect access control in the selectDept function of RuoYi…7.5
• CVE-2025-7099A vulnerability has been found in BoyunCMS up to 1.21 on PHP…5.9
• CVE-2025-70994Yadea T5 Electric Bicycles (models manufactured in/after 202…7.3
• CVE-2025-70997A vulnerability has been discovered in eladmin v2.7 and befo…6.5
• CVE-2025-70998UTT HiPER 810 / nv810v4 router firmware v1.5.0-140603 was di…9.8
• CVE-2025-70999A GPU device-ID validation flaw in the flow.cuda.get_device_…7.5
• CVE-2025-7100A vulnerability was found in BoyunCMS up to 1.4.20 and class…9.8
• CVE-2025-71000An issue in the flow.cuda.BoolTensor component of OneFlow v0…7.5
• CVE-2025-71001A segmentation violation in the flow.column_stack component …6.5