CVE-2025-53082: Samsung Data Management Server Firmware

Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days.

An 'Arbitrary File Deletion' in Samsung DMS(Data Management Server) allows attackers to delete arbitrary files from unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses.

Affected products

• Samsung Data Management Server Firmware: from 2.0.0, before 2.3.13.1 (fixed in 2.3.13.1); from 2.5.0.17, before 2.6.14.1 (fixed in 2.6.14.1); from 2.7.0.15, before 2.9.3.6 (fixed in 2.9.3.6)

Published 2025-07-29. Last modified 2026-06-17.