CVE-2025-68915: Riello-Ups Netman 208

Medium severity, CVSS 4.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/loginbanner_w.cgi XSS via a crafted banner.

Affected products

• Riello-Ups Netman 208: before 1.12 (fixed in 1.12)

Published 2025-12-24. Last modified 2026-10-07.