DobryCMS's upload file functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can result in Remote Code Execution.
This issue was fixed in versions above 5.0.
Published: 2026-03-02
CVSS: 9.8
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Download Exploit for CVE-2025-14532 here:
Use Tor Browser to access .onion site.
https://sonitex.com/exploit-190-cve-2026-2792/
https://sonitex.com/exploit-783-cve-2026-3973/