MBS UBR-01 Mk II

• CVE-2025-41772 High 7.5 wwwupdate.cgi Session token in URL 0.4%
• CVE-2025-41767 High 7.2 Signature bypass on update upload 0.2%
• CVE-2025-41766 High 8.8 Stack buffer overflow on parsing web request 0.5%
• CVE-2025-41765 Critical 9.1 Unchecked role in wwwupload.cgi 0.3%
• CVE-2025-41764 Critical 9.1 Unchecked role in wwwupdate.cgi 0.4%
• CVE-2025-41763 Medium 6.5 Unchecked role in wwwdnload.cgi 0.3%
• CVE-2025-41762 Medium 6.2 Secret leak with wwwdnload.cgi <0.1%
• CVE-2025-41761 High 7.8 Privilege escalation possible 0.2%
• CVE-2025-41760 Medium 4.9 Pass filter with Empty Table 0.4%
• CVE-2025-41759 Medium 4.9 Use of wildcard (“*” or “all”) in Block list 0.4%
• CVE-2025-41758 High 8.8 Arbitrary Write with wwwupload.cgi 0.6%
• CVE-2025-41757 High 8.8 Arbitrary Write with ubr-restore 0.6%
• CVE-2025-41756 High 8.1 Arbitrary Write with ubr-editfile 0.4%
• CVE-2025-41755 Medium 6.5 Arbitrary Read with ubr-logread 0.6%
• CVE-2025-41754 Medium 6.5 Arbitrary Read with ubr-editfile 0.4%