CVE-2025-68916

Critical

Published: 24/12/2025(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file upload with resultant code execution.

An attacker can upload malicious files and execute code on the server, potentially leading to full system compromise.

Update Riello UPS NetMan 208 Application to version 1.12 or later.

Original NVD description (English source)

Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file upload with resultant code execution.