VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 9, 2026· Updated Mar 9, 2026

Arbitrary Write with ubr-restore

CVE-2025-41757

Description

A low-privileged remote attacker can abuse the backup restore functionality of UBR (ubr-restore) which runs with elevated privileges and does not validate the contents of the backup archive to create or overwrite arbitrary files anywhere on the system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • MBS/UBR-01 Mk IIv5
    Range: 0.0.0
  • MBS/UBR-02v5
    Range: 0.0.0
  • MBS/UBR-LONv5
    Range: 0.0.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.