Cloudanix VulnDB

CVE-2025-66953

High · 8.8

CVSS

8.8

EPSS

0.3%

Published

Dec 17, 2025

CISA due date

—

The record

CSRF vulnerability in narda miteq Uplink Power Contril Unit UPC2 v.1.17 allows a remote attacker to execute arbitrary code via the Web-based management interface and specifically the /system_setup.htm, /set_clock.htm, /receiver_setup.htm, /cal.htm?..., and /channel_setup.htm endpoints

Affected packages

Ecosystem Package Introduced Fixed