CVE-2025-68914

Medium · 5.3

CVSS

5.3

EPSS

0.2%

Published

Dec 24, 2025

CISA due date

—

The record

Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/login.cgi username SQL Injection. For example, an attacker can delete the LOGINFAILEDTABLE table.

Affected packages

Ecosystem	Package	Introduced	Fixed