CVE-2025-14014
Deferred
Deferred - Pending Action
Unrestricted File Upload in NTN Smart Panel Enables Unauthorized Access
Publication date: 2026-02-12
Last updated on: 2026-06-04
Assigner: Computer Emergency Response Team of the Republic of Turkey
Description
Description
Unrestricted Upload of File with Dangerous Type vulnerability in NTN Information Processing Services Computer Software Hardware Industry and Trade Ltd. Co. Smart Panel allows Accessing Functionality Not Properly Constrained by ACLs.
This issue affects Smart Panel: before 20251215.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| ntn_information_processing_services | smart_panel | to 2025-12-15 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-434 | The product allows the upload or transfer of dangerous file types that are automatically processed within its environment. |