CVE-2025-25794

MediumCVSS 5.1

Published: 26/02/2025(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

32th percentile - higher than 32% of all known CVEs

Summary

A remote code execution (RCE) vulnerability was discovered in SeaCMS v13.3 within the admin_ping.php component. Attackers can exploit this flaw to execute arbitrary code on the server.

Risk Assessment

The risk for the organization includes full server compromise, data theft, content modification, and potential use of the server for further attacks.

Recommendation

Immediately update SeaCMS to the latest available version and apply security patches. Restrict access to the admin panel to trusted IP addresses only.

Original NVD description (English source)

SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_ping.php.