Mediacrush vulnerabilities
Published CVEs affecting Mediacrush products: 1 record(s), with severity, exploitation and fixes.
CVE-2025-61506
Critical · 9.8
CWE-434 Feb 3, 2026
MediaCrush Unrestricted File Upload Vulnerability (CVE-2025-61506)
An issue was discovered in MediaCrush thru 1.0.1 allowing remote unauthenticated attackers to upload arbitrary files of any size to the /upload endpoint.