CVE-2025-0645 - Arbitrary File Upload in Narkom Communication Technologies' Pyxis Signage

Back Back to CVE browser

HIGH

Arbitrary File Upload in Narkom Communication Technologies' Pyxis Signage

Published Nov 20, 2025

7.2

HIGH

CVSS 3.1

EPSS 0.35%

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Narkom Communication and Software Technologies Trade Ltd. Co. Pyxis Signage allows Accessing Functionality Not Properly Constrained by ACLs.

This issue affects Pyxis Signage: through 31012025.

Affected products

Vendor Narkom Communication and Software Technologies Trade Ltd. Co. Product Pyxis Signage Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=31012025

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Narkom Communication and Software Technologies Trade Ltd. Co.

Pyxis Signage

unaffected

Version	Status	Constraints
0	affected	<=31012025

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-434

Unrestricted Upload of File

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-198283
Advisory
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0404
government-resource
https://www.usom.gov.tr/bildirim/tr-25-0404
government-resourcebroken-link

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-198283		Advisory
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0404		government-resource
https://www.usom.gov.tr/bildirim/tr-25-0404		government-resourcebroken-link