CVE-2020-12854: Seczetta Neprofile

High severity, CVSS 8.8. EPSS: 3% chance of exploitation in the next 30 days.

A remote code execution vulnerability was identified in SecZetta NEProfile 3.3.11. Authenticated remote adversaries can invoke code execution upon uploading a carefully crafted JPEG file as part of the profile avatar.

Affected products

• Seczetta Neprofile: version 3.3.11 only

Published 2020-07-15. Last modified 2026-06-17.