CVE-2025-41676

🗓️ 21 Jul 2025 09:30:07Reported by CERTVDEType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 16 Views

High privileged attacker exhausts system resources via crafted POST requests to send-sms action

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2025-41676	21 Jul 202510:42	–	circl
CNNVD	MB Connect Line mbNET.mini 资源管理错误漏洞	21 Jul 202500:00	–	cnnvd
CNVD	MB CONNECT LINE mbNET.mini Resource Management Error Vulnerability	25 Jul 202500:00	–	cnvd
Cvelist	CVE-2025-41676 Resource Exhaustion via POST Requests to send-sms Action	21 Jul 202509:30	–	cvelist
EUVD	EUVD-2025-22067	3 Oct 202520:07	–	euvd
NVD	CVE-2025-41676	21 Jul 202510:15	–	nvd
OSV	CVE-2025-41676	21 Jul 202510:15	–	osv
Packet Storm	📄 Helmholz Industrial Router REX100 / MBConnectline mbNET.mini Command Injection / DoS	30 Jul 202500:00	–	packetstorm
Positive Technologies	PT-2025-30252 · Sendsms · Sendsms	21 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-41676	23 Jul 202510:01	–	redhatcve

NVD

Vulners

Node

mbconnectline mbnet.mini_firmwareRange<2.3.3

AND

mbconnectline mbnet.miniMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "mbNET.mini",
    "vendor": "MB connect line",
    "versions": [
      {
        "lessThan": "2.3.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "REX 100",
    "vendor": "Helmholz",
    "versions": [
      {
        "lessThan": "2.3.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
certvde	www.certvde.com/de/advisories/VDE-2025-058
seclists	www.seclists.org/fulldisclosure/2025/Jul/38

17 Jun 2026 09:22Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.14.9

EPSS0.00525

SSVC

CWE-400