CVE-2025-48744 - In SIGB PMB before 8.0.1.2, attackers can achieve Local File Inclusion and remote code execution

CRITICAL

In SIGB PMB before 8.0.1.2, attackers can achieve Local File Inclusion and remote code execution

Published May 27, 2025

9.8

CRITICAL

CVSS 3.1

EPSS 0.59%

In SIGB PMB before 8.0.1.2, attackers can achieve Local File Inclusion and remote code execution.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
0	affected	<8.0.1.2

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-28250		Advisory
https://forge.sigb.net/projects/pmb/wiki/Changelog_801#CHANGE-LOG-8012-2025-03-03		Release Notes
https://www.sigb.net/index.php?lvl=cmspage&pageid=6&id_rubrique=553&opac_view=1		Product