The vulnerability CVE-2025-58996 affects Helmut Wandl Advanced Settings versions up to 3.1.1. It permits an attacker with high privileges to upload files of dangerous types without restriction, including web shells, to the web server. This can lead to full system compromise, impacting confidentiality, integrity, and availability. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, and scope change with high impact on all security properties. No patch or vendor advisory is currently available, and the product is not a cloud service.

Successful exploitation allows an attacker with high privileges to upload malicious files such as web shells, resulting in complete compromise of the affected system's confidentiality, integrity, and availability. This can lead to unauthorized remote code execution and full control over the web server hosting the vulnerable application.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the Advanced Settings interface to trusted administrators only and monitor for any unauthorized file uploads. Avoid exposing the vulnerable component to untrusted networks or users.