CVE-2025-41772Disclosure(mbs-solutions / ubr-01_mk_ii)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An unauthenticated remote attacker can obtain valid session tokens because they are exposed in plaintext within the URL parameters of the wwwupdate.cgi endpoint in UBR.

mbs-solutions CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.mbs-solutions.de/mbs-2025-0001

Weakness type (CWE)

CWE-598

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

ubr-01_mk_ii
ubr-02
ubr-lon
universal_bacnet_router_firmware

Threat summary

5 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 4 classified signals
General: 1 classified signal
Peaked 2d ago at 3 mentions (2026-03-09); latest day: 1
5 total mentions across 3 days

Affected systems

Vendors

mbs-solutions

Products

ubr-01_mk_iiubr-02ubr-lonuniversal_bacnet_router_firmware

1 version affected across 4 products

Deep dive

Activity timeline5 mentions / 3d

Signal classification2 categories

Disclosure

480.0%

General

120.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-09	3	Disclosure2General1
2026-03-10	1	Disclosure1
2026-03-12	1	Disclosure1

Full discourse5 posts

CRAC Learning - Tech@cracbot210d
Disclosure
CVE-2025-41772 (CVSS:7.5, HIGH) is Analyzed. An unauthenticated remote attacker can obtain valid session tokens because they are exposed in plaintext within the URL ..https://nvd.nist.gov/vuln/detail/CVE-2025-41772 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The tweet provides a brief analysis of CVE-2025-41772, noting that unauthenticated attackers can obtain session tokens through URLs exposed in plaintext, but does not mention PoC code, exploit tools, patches, or active exploitation.
0000053
172 followersView on X
RedPacket Security@RedPacketSec212d
Disclosure
CVE Alert: CVE-2025-41772 - MBS - UBR-01 Mk II - https://www.redpacketsecurity.com/cve-alert-cve-2025-41772-mbs-ubr-01-mk-ii/ #OSINT #ThreatIntel #CyberSecurity #cve-2025-41772 #mbs #ubr-01-mk-ii
Post summary
The tweet announces CVE‑2025‑41772 for MBS UBR‑01 Mk II and links to a RedPacketSecurity alert page, providing no additional technical details or exploitation information.
00000203
3.5K followersView on X
CVE@CVEnew213d
Disclosure
CVE-2025-41772 An unauthenticated remote attacker can obtain valid session tokens because they are exposed in plaintext within the URL parameters of the wwwupdate.cgi endpoint in UB… https://www.cve.org/CVERecord?id=CVE-2025-41772
Post summary
The CVE details that unauthenticated remote attackers can acquire valid session tokens because they are exposed in plaintext in the URL parameters of the wwwupdate.cgi endpoint.
00000120
56.6K followersView on X
CVEarity@CVEarity213d
General
⚡ New CVE Alert: CVE-2025-41772 📊 Severity: 7.5 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-41772 #CVE-2025-41772 #CVE #High #CyberSecurity #InfoSec https://t.co/oM0CGMwuzm
Post summary
The post announces CVE‑2025‑41772, noting its severity and risk level, but offers no further technical details or actionable information.
0000050
90 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds213d
Disclosure
CVE-2025-41772 Unauthenticated Session Token Exposure in UBR via wwwupdate.cgi Endpoint https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-41772
Post summary
The text announces CVE-2025-41772, describing an unauthenticated session token exposure via the wwwupdate.cgi endpoint, with no PoC, exploit, or patch details mentioned.
0000054
4.0K followersView on X

CPE platform detail4 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

4 of 4 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	mbs-solutions	ubr-01_mk_ii	-	-	-
HW	mbs-solutions	ubr-02	-	-	-
HW	mbs-solutions	ubr-lon	-	-	-
OS	mbs-solutions	universal_bacnet_router_firmware	-	-	-

Explore more

Back to dashboard mbs-solutions CVEs ubr-01_mk_ii vulnerabilities

What researchers are saying

CVE-2025-41772

CRAC Learning - Tech@cracbotDisclosure

The tweet provides a brief analysis of CVE-2025-41772, noting that unauthenticated attackers can obtain session tokens through URLs exposed in plaintext, but does not mention PoC code, exploit tools, patches, or active exploitation.

RedPacket Security@RedPacketSecDisclosure

The tweet announces CVE‑2025‑41772 for MBS UBR‑01 Mk II and links to a RedPacketSecurity alert page, providing no additional technical details or exploitation information.

CVE@CVEnewDisclosure

The CVE details that unauthenticated remote attackers can acquire valid session tokens because they are exposed in plaintext in the URL parameters of the wwwupdate.cgi endpoint.

CVEarity@CVEarityGeneral

The post announces CVE‑2025‑41772, noting its severity and risk level, but offers no further technical details or actionable information.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The text announces CVE-2025-41772, describing an unauthenticated session token exposure via the wwwupdate.cgi endpoint, with no PoC, exploit, or patch details mentioned.