VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 9, 2026· Updated Mar 9, 2026

Unchecked role in wwwdnload.cgi

CVE-2025-41763

Description

A low‑privileged remote attacker can directly interact with the wwwdnload.cgi endpoint to download any resource available to administrators, including system backups and certificate request files.

Affected products

3
  • MBS/UBR-01 Mk IIv5
    Range: 0.0.0
  • MBS/UBR-02v5
    Range: 0.0.0
  • MBS/UBR-LONv5
    Range: 0.0.0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.