CVE-2025-41767

Publication date

2026-03-09 08:18:17

Family

CERTVDE

State

PUBLISHED

Description

A high-privileged remote attacker can fully compromise the device by abusing an update signature bypass vulnerability in the wwwupdate.cgi method in the web interface of UBR.