CVE-2025-66953
High · 8.8CVSS
8.8
EPSS
0.3%
Published
Dec 17, 2025
CISA due date
—
The record
CSRF vulnerability in narda miteq Uplink Power Contril Unit UPC2 v.1.17 allows a remote attacker to execute arbitrary code via the Web-based management interface and specifically the /system_setup.htm, /set_clock.htm, /receiver_setup.htm, /cal.htm?..., and /channel_setup.htm endpoints
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|