Security Advisory
CVE-2025-41772
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
An unauthenticated remote attacker can obtain valid session tokens because they are exposed in plaintext within the URL parameters of the wwwupdate.cgi endpoint in UBR.