Riello NetMan

• CVE-2025-68916 Critical 9.1 Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file upload with resultant code execution. 2.6%
• CVE-2025-68915 Medium 5.5 Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/loginbanner_w.cgi XSS via a crafted banner. 0.2%
• CVE-2025-68914 Medium 6.5 Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/login.cgi username SQL Injection. For example, an attacker can delete the LOGINFAILEDTABLE table. 0.2%