CVE-2026-25200 – MagicInfo9 Server Stored XSS

CVE ID : CVE-2026-25200

Published : Feb. 2, 2026, 4:49 a.m. | 26 minutes ago

Description : A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can result in account takeover

This issue affects MagicINFO 9 Server: less than 21.1090.1.

Severity: 9.8 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…