PT-2026-24030 · Ubr · Ubr

Adrien Rey + 1 · Published 2026-03-09 · Updated 2026-03-09 · CVE-2025-41760

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions UBR (affected versions not specified)

Description An administrator attempting to block all network traffic by configuring a pass filter with an empty table does not achieve the intended result in UBR. In UBR, an empty list does not enforce any restrictions, allowing all network traffic to pass unfiltered. This occurs because an empty list does not enforce any restrictions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-636

Related Identifiers

CVE-2025-41760

Affected Products

Ubr

References · 5

• https://mbs-solutions.de/mbs-2025-0001 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-41760 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-41760 · Security Note
• https://twitter.com/CVEnew/status/2031122571073110509 · Twitter Post
• https://t.me/cveNotify/154759 · Telegram Post