CVE-2025-10267 – NewType Infortech｜NUP Portal – Missing Authentication

CVE ID : CVE-2025-10267

Published : Sept. 12, 2025, 11:15 a.m. | 1 hour, 28 minutes ago

Description : NUP Portal developed by NewType Infortech has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly upload files. If the attacker manages to bypass the file extension restrictions, they could upload a webshell and execute it on the server side.

Severity: 6.9 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…