CVE-2025-41764

CVE-2025-41764 : The connected documents confirm a vulnerability in the wwwupdate.cgi endpoint where insufficient authorization enforcement allows an unauthorized remote attacker to upload and apply arbitrary updates. CVSS‑3.1 metrics indicate a 9.1 (CRITICAL) base score, with Network attack vect...

CVE-2025-41764 Unchecked role in wwwupdate.cgi

Due to insufficient authorization enforcement, an unauthorized remote attacker can exploit the wwwupdate.cgi endpoint to upload and apply arbitrary updates...

CVE-2025-41764

Due to insufficient authorization enforcement, an unauthorized remote attacker can exploit the wwwupdate.cgi endpoint to upload and apply arbitrary updates...

PT-2026-24034

Name of the Vulnerable Software and Affected Versions versions prior to 2025-41764 Description Insufficient authorization enforcement allows a remote attacker to upload and apply arbitrary updates by exploiting the wwwupdate.cgi API endpoint. The wwwupdate.cgi endpoint lacks proper access control...

MBS多款产品 数据伪造问题漏洞

MBS UBR-01 Mk II, etc., are products of the German MBS company. The MBS UBR-01 Mk II is a remote base station device. The MBS UBR-02 is also a remote base station device. The MBS UBR-LON is a communication interface device for industrial automation systems. Several MBS products have vulnerabiliti...

PT-2026-24037

Name of the Vulnerable Software and Affected Versions UBR affected versions not specified Description A high-privileged remote attacker can fully compromise the device by abusing an update signature bypass in the web interface. The issue resides in the wwwupdate.cgi method. Recommendations At the...