CVE-2025-41406: Uchida Wivia 5 Firmware

Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability exists in wivia 5 all versions. If exploited, when a user connects to the affected device with a specific operation, an arbitrary script may be executed on the web browser of the moderator user.

Affected products

• Uchida Wivia 5 Firmware: any version

Published 2025-05-30. Last modified 2026-06-17.