Mediacrush Mediacrush vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Mediacrush Mediacrush: 1 record(s), with affected versions and fixes.cpe:2.3:a:mediacrush:mediacrush
CVE-2025-61506
Critical · 9.8
CWE-434 Feb 3, 2026
MediaCrush Unrestricted File Upload Vulnerability (CVE-2025-61506)
An issue was discovered in MediaCrush thru 1.0.1 allowing remote unauthenticated attackers to upload arbitrary files of any size to the /upload endpoint.