Mbs-solutions vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Mbs-solutions products: 26 record(s), with severity, exploitation and fixes.

Universal Bacnet Router Firmware 15 Universal Gateway Firmware 11

Exploited only (KEV) →

CVE-2025-41754 Medium · 6.5 CWE-1242 Mar 9, 2026

Arbitrary Read with ubr-editfile

A low-privileged remote attacker can exploit the ubr-editfile method in wwwubr.cgi, an undocumented and unused API endpoint to read arbitrary files on the system.