← All CVEs

CVE-2025-68916

critical · 9.1

Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file upload with resultant code execution.

9.1
CVSS
2.6%
EPSS (exploit prob.)
85th
EPSS percentile
2025-12-24
Published

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-25CWE-22

Affected products

VendorProductAffected versions
riello-upsnetman_208< 1.12

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-68916