Riello UPS

Records12All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Riello UPS records in CISA KEV

No Riello UPS vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Netman 208 · all components

TI-2025-42374 CVE-2025-68916 · GHSA-m8vh-pfcv-5mp2

HIGH 74

Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file upload with resultant code execution.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02618 Published 2025-12-24 Fixed in 208 1.12 CWE-25

TI-2025-42372 CVE-2025-68914 · GHSA-c2rc-wwm8-hc57

HIGH 68

Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/login.cgi username SQL Injection.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00223 Published 2025-12-24 Fixed in 208 1.12 CWE-89

TI-2025-42373 CVE-2025-68915 · GHSA-4hfm-3834-w3r8

MEDIUM 58

Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/loginbanner_w.cgi XSS via a crafted banner.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00204 Published 2025-12-24 Fixed in 208 1.12 CWE-79