Unauthorized Access Vulnerability in MBS Solutions Backup Feature
CVE-2025-41762

6.2MEDIUM

Key Information:

Vendor

Mbs

Status
Ubr-01 Mk Ii
Ubr-02
Ubr-lon
Vendor
CVE Published:
9 March 2026

What is CVE-2025-41762?

A security flaw in MBS Solutions’ backup feature allows unauthenticated attackers to exploit a weak hash mechanism. By targeting the wwwdnload.cgi endpoint, attackers can potentially gain access to sensitive information, including password hashes and security certificates, posing a significant risk to data integrity and confidentiality.

Affected Version(s)

UBR-01 Mk II 0.0.0 < 6.0.1.0

UBR-02 0.0.0 < 6.0.1.0

UBR-LON 0.0.0 < 6.0.1.0

References

https://www.mbs-solutions.de/mbs-2025-0001

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Adrien Rey from Cyber Defense Campus Zurich
Daniel Hulliger from Armasuisse
.