cvedb.io
CVE-2025-67260
HIGH · CVSS 8.8
EPSS exploitation probability: 0%
Published 2026-03-20T16:16:16.490 · Last modified 2026-06-17T09:57:32.633

Summary

The Terrapack software, from ASTER TEC / ASTER S.p.A., with the indicated components and versions has a file upload vulnerability that may allow attackers to execute arbitrary code. Vulnerable components include Terrapack TkWebCoreNG:: 1.0.20200914, Terrapack TKServerCGI 2.5.4.150, and Terrapack TpkWebGIS Client 1.0.0.

Affected products

aster-te — terrapack_tkservercgi

Does this affect you?

Add your gear to cvedb and we'll alert you only when aster-te ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.