CVE-2025-71317: Riello Ups Netman 204

Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.

NetMan 204 contains a hard-coded backdoor account with the username and password 'eurek' that grants administrative access. A remote, unauthenticated attacker can authenticate through the cgi-bin/login.cgi endpoint (for example /cgi-bin/login.cgi?username=eurek&password=eurek, which due to lax parameter validation can be shortened to /cgi-bin/login.cgi?username=eurek%20eurek) to obtain administrator privileges, allowing them to alter device configuration, enable the telnet/SSH services, and reset local user credentials.

Affected products

• Riello Ups Netman 204: version 0 only

Published 2026-06-05. Last modified 2026-10-07.