VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 9, 2026· Updated Mar 9, 2026

Secret leak with wwwdnload.cgi

CVE-2025-41762

Description

An unauthenticated attacker can abuse the weak hash of the backup generated by the wwwdnload.cgi endpoint to gain unauthorized access to sensitive data, including password hashes and certificates.

Affected products

3
  • MBS/UBR-01 Mk IIv5
    Range: 0.0.0
  • MBS/UBR-02v5
    Range: 0.0.0
  • MBS/UBR-LONv5
    Range: 0.0.0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.