CVE-2025-41767 — Signature bypass on update upload
A high-privileged remote attacker can fully compromise the device by abusing an update signature bypass vulnerability in the wwwupdate.cgi method in the web interface of UBR.
Published: 2026-03-09 · CVSS: 7.2 · CVSS 3.1
A high-privileged remote attacker can fully compromise the device by abusing an update signature bypass vulnerability in the wwwupdate.cgi method in the web interface of UBR.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7