
Our Research Story: Unauthenticated RCE in Ametys CMS 4.7.x
Our Research Story: Unauthenticated RCE in Ametys CMS 4.7.x

Our Research Story: Unauthenticated RCE in Ametys CMS 4.7.x

CVE-2025-24813 has been making headlines with a critical 9.8 CVSS score, raising concerns across the industry. But after diving deep into its internals, our R&D team came to a different conclusion: this vulnerability is far harder to exploit than it seems.
We use optional Google Analytics cookies to understand how the site is used. Nothing is sent to Google unless you allow analytics. You can change this choice at any time in our Cookies Policy.