CVE-2025-9060

A vulnerability has been found in the  MSoft MFlash application that allows execution of arbitrary code on the server. The issue occurs in the integration configuration functionality that is only available to MFlash administrators. The vulnerability is related to insufficient validation of parameters when setting up security components. This issue affects MFlash v. 8.0 and possibly others. To mitigate apply 8.2-653 hotfix 11.06.2025 and above.

• CWE-20

• https://github.com/klsecservices/Advisories/blob/master/K-MSoft-2025-002.md

Published

Aug 15, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-9054The MultiLoca - WooCommerce Multi Locations Inventory Manage…9.8
• CVE-2025-9055The VAPIX Edge storage API that allowed a privilege escalati…6.4
• CVE-2025-9056Unprotected service in the AudioLink component allows a loca…5.3
• CVE-2025-9057The Biagiotti Core plugin for WordPress is vulnerable to Sto…6.4
• CVE-2025-9058The Mikado Core plugin for WordPress is vulnerable to Stored…6.4
• CVE-2025-9059The Altiris Core Agent Updater package (AeXNSC.exe) is prone…8.8
• CVE-2025-9061The Wilmer Core plugin for WordPress is vulnerable to Stored…6.4
• CVE-2025-9062Authorization Bypass Through User-Controlled Key vulnerabili…7.3
• CVE-2025-9063An authentication bypass security issue exists within Factor…9.8
• CVE-2025-9064A path traversal security issue exists within FactoryTalk Vi…9.1
• CVE-2025-9065A server-side request forgery security issue exists within R…8.8
• CVE-2025-9066A security issue was discovered within FactoryTalk® ViewPoin…8.7