CVE Intelligence

Riello-ups vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Riello-ups products: 3 record(s), with severity, exploitation and fixes.

Netman 208 3

Exploited only (KEV) →

CVE-2025-68916 High · 7.2 CWE-22 Dec 24, 2025
Path Traversal in Riello-ups Netman 208
Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file upload with resultant code execution.
CVE-2025-68915 Medium · 4.8 CWE-79 Dec 24, 2025
Cross-site Scripting (XSS) in Riello-ups Netman 208
Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/loginbanner_w.cgi XSS via a crafted banner.
CVE-2025-68914 Medium · 5.3 CWE-89 Dec 24, 2025
SQL Injection in Riello-ups Netman 208
Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/login.cgi username SQL Injection. For example, an attacker can delete the LOGINFAILEDTABLE table.