CVE-2025-10267 — NewType Infortech｜NUP Portal - Missing Authentication
NUP Portal developed by NewType Infortech has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly upload files. If the attacker manages…
Published: 2025-09-12 · CVSS: 6.9 · CVSS 4.0
NUP Portal developed by NewType Infortech has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly upload files. If the attacker manages to bypass the file extension restrictions, they could upload a webshell and execute it on the server side.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7