Unrestricted File Upload Vulnerability in Inka.Net by TalentSys Consulting
CVE-2025-9846

10CRITICAL

Key Information:

Vendor

Talentsys Consulting Information Technology Industry Inc.

Status
Inka.net
Vendor
CVE Published:
23 September 2025

What is CVE-2025-9846?

The unrestricted file upload vulnerability in Inka.Net, developed by TalentSys Consulting, allows attackers to upload files of dangerous types. This flaw can lead to command injection, enabling unauthorized command execution on the server. Affected versions are those released before 6.7.1. Users of Inka.Net should take immediate action to secure their systems by upgrading to a patched version and implementing strict file upload controls.

Affected Version(s)

Inka.Net 0 < 6.7.1

References

https://www.usom.gov.tr/bildirim/tr-25-0288

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Muhammed Emir Arslan
JSON
.