Unrestricted File Upload Vulnerability in Pyxis Signage by Narkom Communication
CVE-2025-0645
7.2HIGH
Key Information:
- Status
- Vendor
- CVE Published:
- 20 November 2025
What is CVE-2025-0645?
The Pyxis Signage application developed by Narkom Communication is vulnerable to an issue that allows attackers to upload files without proper restrictions. This unrestricted upload can lead to unauthorized access to sensitive functionalities not appropriately constrained by Access Control Lists (ACLs). As a result, malicious users could exploit this vulnerability to execute harmful code, compromise system integrity, or gain unauthorized access to critical resources, thus threatening overall security.
Affected Version(s)
Pyxis Signage 0 <= 31012025