CVE-2025-1676

Summary

CVE-2025-1676 is a critical vulnerability affecting the hzmanyun Education and Training System version 3.1.1. The issue lies in the pdf2swf function of the /pdf2swf file. An attacker can exploit this flaw by manipulating the file argument, leading to os command injection. The vulnerability allows for remote attacks and the exploit has already been made public, increasing the risk for potential exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.