CVE-2021-25857: Supermicro-CMS Project Supermicro-CMS

High severity, CVSS 7.2. EPSS: 0.9% chance of exploitation in the next 30 days.

An issue was discovered in pcmt superMicro-CMS version 3.11, allows authenticated attackers to execute arbitrary code via the font_type parameter to setup.php.

Affected products

• Supermicro-CMS Project Supermicro-CMS: version 3.11 only

Published 2023-08-11. Last modified 2026-06-17.