Critical RCE Vulnerability in Samsung MagicINFO 9 Server Actively Exploited

The vulnerability stems from inadequate input validation in the file upload functionality of Samsung MagicINFO 9 Server. Specifically, the server fails to sanitize filename inputs and does not enforce file extension or authentication checks.