https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 06:33:29 +0000 https://cve.radiocsirt.org/vuln/cve-2025-71317 <p><strong>Affected:</strong> Riello UPS NetMan 204</p> <p>NetMan 204 contains a hard-coded backdoor account with the username and password &#39;eurek&#39; that grants administrative access. A remote, unauthenticated attacker can authenticate through the cgi-bin/login.cgi endpoint (for example /cgi-bin/login.cgi?username=eurek&amp;password=eurek, which due to lax parameter validation can be shortened to /cgi-bin/login.cgi?username=eurek%20eurek) to obtain administrator privileges, allowing them to alter device configuration, enable the telnet/SSH services, and reset local user credentials.</p> <p><strong>Affected:</strong> Riello UPS NetMan 204</p> <p>NetMan 204 contains a hard-coded backdoor account with the username and password &#39;eurek&#39; that grants administrative access. A remote, unauthenticated attacker can authenticate through the cgi-bin/login.cgi endpoint (for example /cgi-bin/login.cgi?username=eurek&amp;password=eurek, which due to lax parameter validation can be shortened to /cgi-bin/login.cgi?username=eurek%20eurek) to obtain administrator privileges, allowing them to alter device configuration, enable the telnet/SSH services, and reset local user credentials.</p> https://cve.radiocsirt.org/vuln/cve-2025-71317