CVE-2025-58963: 7oroof Medcity

Critical severity, CVSS 10.0. EPSS: 0.5% chance of exploitation in the next 30 days.

Unrestricted Upload of File with Dangerous Type vulnerability in 7oroof Medcity medcity allows Upload a Web Shell to a Web Server.This issue affects Medcity: from n/a through < 1.1.9.

Affected products

• 7oroof Medcity: up to and including 1.1.9

Published 2025-10-22. Last modified 2026-10-08.