PT-2026-24033 · Unknown · Wwwdnload.Cgi

Adrien Rey + 1 · Published 2026-03-09 · Updated 2026-03-09 · CVE-2025-41763

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions versions (affected versions not specified)

Description A remote attacker with low privileges can interact directly with the ''wwwdnload.cgi'' endpoint to download any resource available to administrators. This includes system backups and certificate request files. The attacker interacts with the endpoint to access resources.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-497

Related Identifiers

CVE-2025-41763

Affected Products

Wwwdnload.Cgi

References · 6

• https://osv.dev/vulnerability/CVE-2025-41763 · Vendor Advisory
• https://mbs-solutions.de/mbs-2025-0001 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-41763 · Security Note
• https://twitter.com/CVEnew/status/2031122568145523183 · Twitter Post
• https://t.me/cveNotify/154762 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2030987693484597451 · Twitter Post