Description

The Terrapack software, from ASTER TEC / ASTER S.p.A., with the indicated components and versions has a file upload vulnerability that may allow attackers to execute arbitrary code. Vulnerable components include Terrapack TkWebCoreNG:: 1.0.20200914, Terrapack TKServerCGI 2.5.4.150, and Terrapack TpkWebGIS Client 1.0.0.

INFO

Published Date :

2026-03-20T00:00:00.000Z

Last Modified :

2026-03-23T13:57:45.455Z

Source :

mitre
AFFECTED PRODUCTS

The following products are affected by CVE-2025-67260 vulnerability.

Vendors Products
Aster
  • Tkservercgi
  • Tkwebcoreng
  • Tpkwebgis Client
Aster-te
  • Terrapack Tkservercgi
  • Terrapack Tkwebcoreng
  • Terrapack Tpkwebgis
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-67260.

URL Resource
http://aster.com cve-icon cve-icon
http://terrapack.com cve-icon cve-icon
https://github.com/edi-marc/Vulnerability_List/tree/main/CVE_Terrapack cve-icon cve-icon
https://packetstorm.news/files/id/217271 cve-icon cve-icon
https://www.acn.gov.it/portale/en/csirt-italia cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact