CVE-2025-14849

Critical · 9.8

CVSS

9.8

EPSS

0.6%

Published

Dec 18, 2025

CISA due date

—

The record

Advantech WebAccess/SCADA is vulnerable to unrestricted file upload, which may allow an attacker to remotely execute arbitrary code.

Ecosystem	Package	Introduced	Fixed