CVE-2025-68914

Riello / NetMan PUBLISHED

Description (CNA)

Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/login.cgi username SQL Injection. For example, an attacker can delete the LOGINFAILEDTABLE table.

Affected (CNA)

Vendor / product	Versions
Riello / NetMan	affected 208 before 208 1.12

CWE

CWE-89

References

https://github.com/gerico-lab/riello-multiple-vulnerabilities-2025

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.