CVE-2025-57631: Tduckcloud Tduck

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

SQL Injection vulnerability in TDuckCloud v.5.1 allows a remote attacker to execute arbitrary code via the Add a file upload module

Affected products

• Tduckcloud Tduck: version 5.1 only

Published 2025-09-16. Last modified 2026-08-04.