CVE-2025-53970: Dos Co., Ltd SS1

Critical severity, CVSS 9.3. EPSS: 0.5% chance of exploitation in the next 30 days.

SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to upload arbitrary files and execute OS commands with SYSTEM privileges.

Affected products

Published 2025-08-28. Last modified 2026-06-17.