CVE-2025-68916

CRITICAL
Published Dec 24, 2025 Modified Jan 2, 2026 CWE-25 CWE-22

Description

Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file upload with resultant code execution.

CVSS v3.1 Score

9.1
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness Type (CWE)

CWE-25 CWE-25
CWE-22 Path Traversal

Affected Products

Vendor Product
riello-ups netman_208

References

Frequently Asked Questions

What is CVE-2025-68916? +
Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file upload with resultant code execution. It has a CVSS v3.1 base score of 9.1 (CRITICAL).
How severe is CVE-2025-68916? +
CVE-2025-68916 has a CVSS v3.1 score of 9.1 out of 10, rated CRITICAL. This is a critical vulnerability that should be patched immediately.
What products are affected by CVE-2025-68916? +
CVE-2025-68916 affects products from riello-ups, specifically: netman_208. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2025-68916? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2023-52076 8.5

Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary …
CVE-2023-52138 8.2

Engrampa is an archive manager for the MATE environment. Engrampa is found to be vulnerable to a Path Traversal vulnerability …
CVE-2023-6947 7.7

The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Directory Traversal in all versions up to, …
CVE-2023-6919 7.5

Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard allows Absolute Path Traversal.This issue affects VGuard: before …
CVE-2024-2442 7.5

Franklin Fueling System EVO 550 and EVO 5000 are vulnerable to a Path Traversal vulnerability that could allow an attacker …
CVE-2025-0225 4.3

A vulnerability classified as problematic was found in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). Affected by this vulnerability is an …

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2025-68916 — free, no signup required.

Start Free Scan