CVE-2025-0645
Arbitrary File Upload in Narkom Communication Technologies' Pyxis Signage
- State
- Published
- Severity
- 7.2 High
- Published
- Nov 20, 2025
- Updated
- Jun 6, 2026
- Reserved
- Jan 22, 2025
Description
Unrestricted Upload of File with Dangerous Type vulnerability in Narkom Communication and Software Technologies Trade Ltd. Co. Pyxis Signage allows Accessing Functionality Not Properly Constrained by ACLs.
This issue affects Pyxis Signage: through 31012025.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.2 High | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H | TR-CERT |
Weaknesses
- CWE-434 Unrestricted Upload of File with Dangerous Type
Affected Products
| Product | Versions |
|---|---|
Pyxis SignageNarkom Communication and Software Technologies Trade Ltd. Co. |
|
References
- https://www.usom.gov.tr/bildirim/tr-25-0404government-resourcebroken-link
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0404government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.