Security Advisory
CVE-2025-41756
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
A low-privileged remote attacker can exploit the ubr-editfile method in wwwubr.cgi, an undocumented and unused API endpoint to write arbitrary files on the system.