CVE-2025-65783

CriticalCVSS 9.8

Published: 13/01/2026(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.46%

37th percentile - higher than 37% of all known CVEs

Summary

An arbitrary file upload vulnerability in the /utils/uploadFile component of Hubert Imoveis e Administracao Ltda Hub v2.0 1.27.3 allows attackers to execute arbitrary code by uploading a crafted PDF file.

Risk Assessment

Risk of server compromise through arbitrary code execution, potentially leading to data theft, system modification, or further attacks on the infrastructure.

Recommendation

Immediately update the system to the latest version and implement file type validation and upload restrictions at the application level.

Other vulnerabilities in Hubert Imoveis e Administracao Ltda Hub

CVE-2025-65784Medium
Insecure permissions in Hubert Imoveis e Administracao Ltda Hub v2.0 1.27.3 allow authenticated attackers with low-level privileges to access other users' information via a crafted API request.

Original NVD description (English source)

An arbitrary file upload vulnerability in the /utils/uploadFile component of Hubert Imoveis e Administracao Ltda Hub v2.0 1.27.3 allows attackers to execute arbitrary code via uploading a crafted PDF file.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS