What is CVE-2025-41761?

CVE-2025-41761 is a high-severity vulnerability in Mbs Ubr-01 Mk Ii, classified under Argument Injection. CVSS score: 7.8/10. Published 2026-03-09.

How severe is CVE-2025-41761?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Mbs Ubr-01 Mk Ii

CVE-2025-41761

A low‑privileged local attacker who gains access to the UBR service account (e.g., via SSH) can escalate privileges to obtain full system access. This is due to the service account being permitted to execute certain binaries (e.g., tcpdump…

EPSS: 0.002 (5.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Mbs Ubr-01 Mk Ii — versions 0.0.0
Mbs Ubr-02 — versions 0.0.0
Mbs Ubr-lon — versions 0.0.0
Mbs-solutions Ubr-01_mk_ii
Mbs-solutions Ubr-02
Mbs-solutions Ubr-lon
Mbs-solutions Universal_bacnet_router_firmware

Weakness classification (CWE)

CWE-88 — Argument Injection

References

info@cert.vde.com (Vendor Advisory)

Frequently asked questions

What is CVE-2025-41761?: CVE-2025-41761 is a high-severity vulnerability in Mbs Ubr-01 Mk Ii, classified under Argument Injection. CVSS score: 7.8/10. Published 2026-03-09.
How severe is CVE-2025-41761?: High severity. CVSS v3 base score is 7.8 out of 10.