TI-2025-13275 CVE-2025-14532 · GHSA-mrvp-mhjr-mj2jRemote Code Execution via Unrestricted File Upload in DobryCMSPriority MEDIUM 49DobryCMS's upload file functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can result in Remote Code Execution.CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00623 · Published 2026-03-02 · No fix listed CWE-434