Global
Samsung MagicINFO 9 Server path traversal flaw CVE-2024-7399 added to CISA's KEV catalog
CISA added CVE-2024-7399, a path traversal flaw in Samsung MagicINFO 9 Server, to its Known Exploited Vulnerabilities catalog on April 24, 2026, based on evidence of active exploitation. The flaw lets unauthenticated attackers upload JSP files and run code with system-level access. Samsung fixed it in version 21.1050 in August 2024.
- Type
- Vulnerability
- Sector
- Other
- Country
- Global
Products in the directory
Sources
- U.S. CISA adds SimpleHelp, Samsung, and D-Link flaws to its Known Exploited Vulnerabilities catalog · Security Affairs
- CVE-2024-7399 · NIST NVD