CVE-2025-41756 in UBR-01 Mk II

Résumé

par MITRE • 09/03/2026

A low-privileged remote attacker can exploit the ubr-editfile method in wwwubr.cgi, an undocumented and unused API endpoint to write arbitrary files on the system.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsable: CERTVDE
• Réserver: 16/04/2025
• Divulgation: 09/03/2026
• Modérer: accepté
• Entrée: VDB-349809
• CPE: prêt
• CWE: CWE-1242 (confirmé)
• CVSS: 8.1 (CNA)
• EPSS: 0.00326
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-41756
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-41756
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-41756/