CVE Intelligence

Mediacrush vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Mediacrush products: 1 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2025-61506 Critical · 9.8 CWE-434 Feb 3, 2026
MediaCrush Unrestricted File Upload Vulnerability (CVE-2025-61506)
An issue was discovered in MediaCrush thru 1.0.1 allowing remote unauthenticated attackers to upload arbitrary files of any size to the /upload endpoint.