Home / Vulnerability Intelligence / CVE-2025-41756

CVE-2025-41756 - Vulnerability Analysis

HighCVSS: 8.1

Last Updated: March 9, 2026

Unknown Unknown - Unrestricted File Upload

Published: March 9, 2026Updated: March 9, 2026Remote Exploitable

Overview

Unknown vendor Unknown product contains an unrestricted file upload caused by the ubr-editfile method in wwwubr.cgi, letting low-privileged remote attackers write arbitrary files on the system, exploit requires no special privileges.

Severity & Score

Severity: High

CVSS Score: 8.1

EPSS Score: 9.6%(Probability of exploitation in next 30 days)

Impact

Low-privileged remote attackers can write arbitrary files, potentially leading to code execution or system compromise.

Mitigation

Update to the latest version or apply vendor patches to secure the ubr-editfile method.

References

https://www.mbs-solutions.de/mbs-2025-0001

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 9, 2026

🟠 CVE-2025-41756 - High (8.1) A low-privileged remote attacker can exploit the ubr-editfile method in wwwubr.cgi, an undocumented and unused API endpoint to write arbitrary files on the system. 🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-41756/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

Details

CVE ID: CVE-2025-41756
Severity: High
CVSS Score: 8.1
Type: unrestricted_file_upload
Status: unconfirmed
EPSS: 9.6%
Social Posts: 1

CWE

CWE-1242

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

EPSS Score

9.6%Probability of exploitation in the next 30 days