CVE-2025-2396: Edetw U-Office Force

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

The U-Office Force from e-Excellence has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

Affected products

• Edetw U-Office Force: before 28.0 (fixed in 28.0)

Published 2025-03-17. Last modified 2026-06-17.