Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A low-privileged remote attacker can exploit the ubr-editfile method in wwwubr.cgi, an undocumented and unused API endpoint to read arbitrary files on the system.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 4 products
CVE-2025-41754 A low-privileged remote attacker can exploit the ubr-editfile method in wwwubr.cgi, an undocumented and unused API endpoint to read arbitrary files on the system. https://www.cve.org/CVERecord?id=CVE-2025-41754
Post summary
CVE‑2025‑41754 discloses a low‑privilege remote file‑read vulnerability via an undocumented ubr‑editfile API endpoint in wwwubr.cgi; no PoC, exploit, patch, or active exploitation reports are provided.
CVE-2025-41754 Unauthenticated Arbitrary File Read Vulnerability in wwwubr.cgi API Endpoint https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-41754
Post summary
The message announces CVE‑2025‑41754 as an unauthenticated arbitrary file read vulnerability affecting the wwwubr.cgi API endpoint.
⚡ New CVE Alert: CVE-2025-41754 📊 Severity: 6.5 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-41754 #CVE-2025-41754 #CVE #Medium #CyberSecurity #InfoSec https://t.co/T11ttnWtSq
Post summary
The post only announces CVE‑2025‑41754 with its severity and a reference link, lacking technical, exploit, or mitigation details.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | mbs-solutions | ubr-01_mk_ii | - | - | - |
| HW | mbs-solutions | ubr-02 | - | - | - |
| HW | mbs-solutions | ubr-lon | - | - | - |
| OS | mbs-solutions | universal_bacnet_router_firmware | - | - | - |