CVE-2025-41765 - Vulnerability Analysis

Overview

Affected product contains an unrestricted file upload vulnerability caused by insufficient authorization enforcement in the wwwupload.cgi endpoint, letting unauthorized remote attackers upload and apply arbitrary data, exploit requires no special privileges.

Severity & Score

Impact

Unauthorized remote attackers can upload arbitrary files, potentially leading to system compromise or data manipulation.

Mitigation

Update to the latest version or apply vendor-provided patches to enforce proper authorization.

References

• https://www.mbs-solutions.de/mbs-2025-0001

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 9, 2026

🔴 CVE-2025-41765 - Critical (9.1) Due to insufficient authorization enforcement, an unauthorized remote attacker can exploit the wwwupload.cgi endpoint to upload and apply arbitrary data. This includes, but is not limited to, contact images, HTTPS certificates, system backups for ... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-41765/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner