CVE-2025-41767: Mbs-Solutions Universal Bacnet Router Firmware

High severity, CVSS 7.2. EPSS: 0.2% chance of exploitation in the next 30 days.

A high-privileged remote attacker can fully compromise the device by abusing an update signature bypass vulnerability in the wwwupdate.cgi method in the web interface of UBR.

Affected products

• Mbs-Solutions Universal Bacnet Router Firmware: before 6.0.1.0 (fixed in 6.0.1.0)

Published 2026-03-09. Last modified 2026-06-17.