CVE-2024-7399

nvd.nist.gov • April 27, 2026

Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority.

Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.

Denotes Vulnerable Software Are we missing a CPE here? Please let us know .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Alerts on Critical Flaws in SimpleHelp, Samsung MagicINFO, and D-Link Devices On April 24, 2026, CISA added four actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog. The affected products include SimpleHelp remote management software, Samsung MagicINFO 9 Server, and D-Link DIR-823X routers. The most critical flaw, CVE-2024-57726, has a CVSS score of 9.9 and allows low-privileged users to escalate privileges to server admin without additional authentication. This vulnerability is being exploited by the DragonForce ransomware operation, which uses it to deploy ransomware across managed devices. Additionally, Samsung's MagicINFO has a command injection vulnerability, and D-Link routers are affected by a buffer overflow. CISA has mandated that federal agencies must patch or discontinue use of these products by May 8, 2026. Organizations using these systems are urged to take immediate action to mitigate risks associated with these vulnerabilities. 3 sources 78

Extracted Entities

CVE-2024-7399

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

Platforms (1)