Vulnerability · Published Dec 24, 2025 · Assigned by icscert
CVE-2025-8769MegaSys Computer Technologies Telenium Online Web Application Improper Input Validation
Critical 9.8
In plain English
A critical-severity improper input validation in Telenium Online Web Application from MegaSys Computer Technologies. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 64% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)1.0%top 36.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Telenium Online Web Application is vulnerable due to a Perl script that is called to load the login page. Due to improper input validation, an attacker can inject arbitrary Perl code through a crafted HTTP request, leading to remote code execution on the server.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| MegaSys Computer Technologies | Telenium Online Web Application | 0 – through 8.3 |
Weakness: CWE-20 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H