CVE-2025-29411

Summary

CVE-2025-29411 is a critical vulnerability affecting the Client Profile Update section of Mart Developers iBanking v2.0.0. An attacker can exploit this arbitrary file upload vulnerability by uploading a maliciously crafted PHP file, which then allows them to execute arbitrary code on the targeted system. This issue poses a significant risk, as successful exploitation could lead to unauthorized system access, data theft, or further malicious activities. It is strongly recommended that users update their iBanking installation to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.