CVE-2025-68916
CriticalCVSS 9.1Exploitation Probability (EPSS)
High risk85th percentile - higher than 85% of all known CVEs
Summary
Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file upload with resultant code execution.
Risk Assessment
An attacker can upload malicious files and execute code on the server, potentially leading to full system compromise.
Recommendation
Update Riello UPS NetMan 208 Application to version 1.12 or later.
Other vulnerabilities in Riello UPS NetMan 208
See all- CVE-2025-68915Medium
XSS vulnerability in Riello UPS NetMan 208 before 1.12, present in cgi-bin/loginbanner_w.cgi via a crafted banner.
- CVE-2025-68914Medium
Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/login.cgi username SQL Injection. For example, an attacker can delete the LOGINFAILEDTABLE table.
Original NVD description (English source)
Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file upload with resultant code execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS