Log in Start free

Riello

Products

ProductCVEsExploitedLatest
NetMan3–Dec 24, 2025
Netman 2042–Sep 24, 2024

Exploited and recent CVEs

  • CVE-2025-68916 Critical 9.1 Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file upload with resultant code execution. 2.6%
  • CVE-2025-68915 Medium 5.5 Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/loginbanner_w.cgi XSS via a crafted banner. 0.2%
  • CVE-2025-68914 Medium 6.5 Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/login.cgi username SQL Injection. For example, an attacker can delete the LOGINFAILEDTABLE table. 0.2%
  • CVE-2024-8877 Medium 6.9 SQL Injection 77.3%
  • CVE-2024-8878 Critical 10.0 Unauthenticated Password Reset 1.3%