Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

UBR-01 Mk II — Vulnerabilities & Security Advisories 15

All 15 CVE vulnerabilities found in UBR-01 Mk II, with AI-generated Chinese analysis, references, and POCs.

Vendor: MBS

CVE IDTitleCVSSSeverityPublished
CVE-2025-41772 wwwupdate.cgi Session token in URL CWE-598 7.5 High2026-03-09
CVE-2025-41767 Signature bypass on update upload CWE-347 7.2 High2026-03-09
CVE-2025-41766 Stack buffer overflow on parsing web request CWE-787 8.8 High2026-03-09
CVE-2025-41765 Unchecked role in wwwupload.cgi CWE-862 9.1 Critical2026-03-09
CVE-2025-41764 Unchecked role in wwwupdate.cgi CWE-862 9.1 Critical2026-03-09
CVE-2025-41763 Unchecked role in wwwdnload.cgi CWE-497 6.5 Medium2026-03-09
CVE-2025-41762 Secret leak with wwwdnload.cgi CWE-328 6.2 Medium2026-03-09
CVE-2025-41761 Privilege escalation possible CWE-88 7.8 High2026-03-09
CVE-2025-41760 Pass filter with Empty Table CWE-636 4.9 Medium2026-03-09
CVE-2025-41759 Use of wildcard (“*” or “all”) in Block list CWE-636 4.9 Medium2026-03-09
CVE-2025-41758 Arbitrary Write with wwwupload.cgi CWE-22 8.8 High2026-03-09
CVE-2025-41757 Arbitrary Write with ubr-restore CWE-22 8.8 High2026-03-09
CVE-2025-41756 Arbitrary Write with ubr-editfile CWE-1242 8.1 High2026-03-09
CVE-2025-41755 Arbitrary Read with ubr-logread CWE-22 6.5 Medium2026-03-09
CVE-2025-41754 Arbitrary Read with ubr-editfile CWE-1242 6.5 Medium2026-03-09

All 15 known CVE vulnerabilities affecting UBR-01 Mk II with full Chinese analysis, references, and POCs where available.