VULNERABILITY INTELLIGENCE

CVE-2025-68914

CVSS score6.5 MEDIUM
EPSS probability0.22%
CISA KEVNot currently listed
Published2025-12-24
Last modified2026-10-07
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Description

Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/login.cgi username SQL Injection. For example, an attacker can delete the LOGINFAILEDTABLE table.

Weakness classification

  • cve@mitre.org: CWE-89

Primary references