Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-25200 EUVD-2026-5090GHSA-3x3j-v5j3-f2p6

A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can …

Published Feb 2, 2026 · Updated Feb 26, 2026 · Assigned by samsung.tv_appliance

Description

A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can result in account takeover

This issue affects MagicINFO 9 Server: less than 21.1090.1.

Affected products

VendorProductAffectedFixed
Samsung Electronics MagicINFO 9 Server 21.1090.1 —

References