The vulnerability CVE-2025-68549 affects zozothemes Wiguard versions before 2.0.1 and permits an attacker with low privileges to upload files of dangerous types without restriction. This can result in uploading a web shell, which may allow remote code execution and full control over the affected web server. The CVSS 3.1 base score is 9.9, reflecting network attack vector, low attack complexity, no user interaction, and scope change with high impact on confidentiality, integrity, and availability. There is no vendor advisory or patch link available at this time, and the product is not a cloud service, so remediation depends on vendor updates.

Successful exploitation allows an attacker to upload a web shell, leading to remote code execution on the web server. This compromises confidentiality, integrity, and availability of the affected system. Given the critical CVSS score of 9.9, the impact is severe, potentially resulting in full system takeover.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict file upload permissions, implement strict file type validation, and monitor for suspicious upload activity as temporary mitigations.