← Vulnerability feed

Vulnerability record · CVE-2019-14451 · published 25 October 2019

CVE-2019-14451: Repetier-server unrestricted file upload vulnerability

Repetier Server · Repetier Server

RepetierServer.exe in Repetier-Server 0.8 through 0.91 does not properly validate the XML data structure provided when uploading a new printer configuration. When this is combined with CVE-2019-14450, an attacker can upload an "external command" configuration as a printer configuration, and achieve remote code execution. After exploitation, loading of the external command configuration is dependent on a system reboot or service restart.

9.8 CVSS 3.1 Critical EPSS 4.5% · top 8.9% CWE-434 · Unrestricted file upload
9.8CVSS 3.1 base score, v2 10.0
4.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

RepetierServer.exe in Repetier-Server 0.8 through 0.91 does not properly validate the XML data structure provided when uploading a new printer configuration. When this is combined with CVE-2019-14450, an attacker can upload an "external command" configuration as a printer configuration, and achieve remote code execution. After exploitation, loading of the external command configuration is dependent on a system reboot or service restart.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.repetier-server.com/knowledgebase/security-advisory/ Vendor Advisory
https://www.repetier-server.com/manuals/0.91/index.html Vendor Advisory
https://www.repetier-server.com/knowledgebase/security-advisory/ Vendor Advisory
https://www.repetier-server.com/manuals/0.91/index.html Vendor Advisory

Track CVE-2019-14451 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2023-31060Repetier-server vulnerabilityRepetier Server through 1.4.10 executes as SYSTEM. This can be leveraged in conjunction with CVE-2023-31059 for full compromise.EPSS 1.2%9.8CVE-2019-14450Repetier-server path traversal vulnerabilityA directory traversal vulnerability was discovered in RepetierServer.exe in Repetier-Server 0.8 through 0.91 that allows for the creation of a user c…EPSS 10%8.8CVE-2023-31061Repetier-server cross-site request forgery vulnerabilityRepetier Server through 1.4.10 does not have CSRF protection.EPSS 0.45%7.5CVE-2023-31059Repetier-server path traversal vulnerabilityRepetier Server through 1.4.10 allows ..%5c directory traversal for reading files that contain credentials, as demonstrated by connectionLost.php.EPSS 5.6%10.0CVE-2026-56291Balbooa Forms Joomla extension unauthenticated arbitrary file upload RCEThe Balbooa Forms extension for Joomla before version 2.4.1 accepts file uploads without authentication and does not restrict file type, allowing exe…KEVEPSS 15%analysed10.0CVE-2026-48939iCagenda Joomla extension unrestricted file upload leads to PHP RCEThe iCagenda extension for Joomla fails to restrict file types in its file attachment feature, allowing arbitrary file uploads that result in PHP cod…KEVEPSS 20%analysed10.0CVE-2026-56290Joomla Page Builder CK unauthenticated file upload leads to RCEThe Joomla Page Builder CK extension before 3.6.0 allows unauthenticated arbitrary file uploads, letting an attacker place executable files on the se…KEVEPSS 31%analysed10.0CVE-2026-48908SP Page Builder for Joomla unauthenticated arbitrary file upload RCESP Page Builder for Joomla permits unauthenticated users to upload arbitrary files, which can lead to upload and execution of PHP code. The flaw is a…KEVEPSS 89%analysed

Source: NIST National Vulnerability Database (record CVE-2019-14451), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.