CVE-2025-53120: Securden Unified Pam

Critical severity, CVSS 9.4. EPSS: 11.4% chance of exploitation in the next 30 days.

A path traversal vulnerability in unauthenticated upload functionality allows a malicious actor to upload binaries and scripts to the server’s configuration and web root directories, achieving remote code execution on the Unified PAM server.

Affected products

• Securden Unified Pam: from 9.0, up to and including 11.3.1

Published 2025-08-25. Last modified 2026-06-17.