Security Advisory
CVE-2025-41772
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
An unauthenticated remote attacker can obtain valid session tokens because they are exposed in plaintext within the URL parameters of the wwwupdate.cgi endpoint in UBR.