# Samsung MagicINFO 9 Server path traversal flaw CVE-2024-7399 added to CISA's KEV catalog

- Date: 2026-04-24
- Location: Global
- Type: Vulnerability
- Sector: Other
- CVE: CVE-2024-7399
- Products: [MagicINFO](https://signagelist.org/products/magicinfo/)

CISA added CVE-2024-7399, a path traversal flaw in Samsung MagicINFO 9 Server, to its Known Exploited Vulnerabilities catalog on April 24, 2026, based on evidence of active exploitation. The flaw lets unauthenticated attackers upload JSP files and run code with system-level access. Samsung fixed it in version 21.1050 in August 2024.

## Sources

- [U.S. CISA adds SimpleHelp, Samsung, and D-Link flaws to its Known Exploited Vulnerabilities catalog](https://securityaffairs.com/191281/security/u-s-cisa-adds-simplehelp-samsung-and-d-link-flaws-to-its-known-exploited-vulnerabilities-catalog) (Security Affairs)
- [CVE-2024-7399](https://nvd.nist.gov/vuln/detail/CVE-2024-7399) (NIST NVD)

Page: https://signagelist.org/incidents/2026-04-samsung-magicinfo-9-server-path-traversal-flaw/