Threats tagged 'ghsa-crpp-v376-mvfw'

CVE-2025-40548 is a vulnerability in Serv U involving a missing validation process that allows a malicious actor with administrative privileges to execute arbitrary code. The vulnerability requires administrative access to exploit. On Windows systems, the risk is considered medium because services often run under less-privileged accounts by default, reducing the likelihood of full exploitation.