PT-2026-24033 · Unknown · Wwwdnload.Cgi

Adrien Rey + 1 · Publicado 2026-03-09 · Atualizado 2026-03-09 · CVE-2025-41763

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions versions (affected versions not specified)

Description A remote attacker with low privileges can interact directly with the ''wwwdnload.cgi'' endpoint to download any resource available to administrators. This includes system backups and certificate request files. The attacker interacts with the endpoint to access resources.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-497

Identificadores relacionados

CVE-2025-41763

Produtos afetados

Wwwdnload.Cgi

Referências · 6

• https://osv.dev/vulnerability/CVE-2025-41763 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2031122568145523183 · Publicação no Twitter
• https://t.me/cveNotify/154762 · Publicação no Telegram
• https://mbs-solutions.de/mbs-2025-0001 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/2030987693484597451 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-41763 · Nota de Segurança