PatchTheCVEriello-ups vulnerabilities
Recent CVEs affecting riello-ups products. 5 tracked.
riello-ups has 5 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 5. Most recent: 2025-12-24. Highest priority: CVE-2024-8877 (score 64/100).
- CVE-2025-68916 CRITICAL 9.1 UPGRADE Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file
- CVE-2025-68914 MEDIUM 6.5 UPGRADE Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/login.cgi username SQL Injection
- CVE-2025-68915 MEDIUM 5.5 UPGRADE Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/loginbanner_w.cgi XSS via a crafted banner.
- CVE-2024-8878 CRITICAL 9.8 UPGRADE The password recovery mechanism for the forgotten password in Riello Netman 204 allows an attacker to reset th
- CVE-2024-8877 CRITICAL 9.8 UPGRADE Improper neutralization of special elements results in a SQL Injection vulnerability in Riello Netman 204
FAQ
How do I fix riello-ups vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is riello-ups being exploited right now?
None of the tracked riello-ups CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which riello-ups CVE should I patch first?
CVE-2024-8877 currently ranks highest (64/100): Improper neutralization of special elements results in a SQL Injection vulnerability in Riello Netman 204.