CVE-2025-25765

Summary

CVE-2025-25765 is a newly disclosed vulnerability affecting the MRCMS v3.1.2 software. This issue allows an attacker to write arbitrary files via the component /file/save.do, posing a significant risk for unauthorized data modification or system compromise. The vulnerability can be exploited remotely, making it crucial for users to apply the necessary patches as soon as possible to mitigate the risk. Failure to address this issue may result in data loss or unauthorized access to sensitive information.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.