VULNERABILITY INTELLIGENCE

CVE-2025-41756

CVSS score8.1 HIGH

EPSS probability0.35%

CISA KEVNot currently listed

Published2026-03-09

Last modified2026-06-17

Description

A low-privileged remote attacker can exploit the ubr-editfile method in wwwubr.cgi, an undocumented and unused API endpoint to write arbitrary files on the system.