CVE-2025-41756
High · 8.1CVSS
8.1
EPSS
0.3%
Published
Mar 9, 2026
CISA due date
—
The record
A low-privileged remote attacker can exploit the ubr-editfile method in wwwubr.cgi, an undocumented and unused API endpoint to write arbitrary files on the system.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2023-3634 In products of the MSE6 product-family by Festo a remote authenticated, low privileged… CWE-1242
- CVE-2025-41754 A low-privileged remote attacker can exploit the ubr-editfile method in wwwubr.cgi, an… CWE-1242
- CVE-2026-24714 Some end of service NETGEAR products provide "TelnetEnable" functionality, which allows a… CWE-1242
- CVE-2021-4469 Denver SHO-110 IP cameras expose a secondary HTTP service on TCP port 8001 that provides… CWE-1242