CVE-2025-66953: Nardamiteq UPC2 Firmware

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

CSRF vulnerability in narda miteq Uplink Power Contril Unit UPC2 v.1.17 allows a remote attacker to execute arbitrary code via the Web-based management interface and specifically the /system_setup.htm, /set_clock.htm, /receiver_setup.htm, /cal.htm?..., and /channel_setup.htm endpoints

Affected products

Published 2025-12-17. Last modified 2026-06-17.