Riello Netman vulnerabilities

• riello netman 204 NetMan 204 Missing Authentication for Administrative Functions CVE-2025-71318 9.3 CriticalJune 5, 2026
• riello netman 204 NetMan 204 Hard-coded Backdoor Credentials CVE-2025-71317 9.3 CriticalJune 5, 2026
• riello netman, riello-ups netman 208 +1 more Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory... CVE-2025-68916 9.1 CriticalDecember 24, 2025
• riello netman, riello-ups netman 208 +1 more Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/loginbanner_w.cgi XSS via a crafted... CVE-2025-68915 5.5 MediumDecember 24, 2025
• riello netman, riello-ups netman 208 +1 more Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/login.cgi username SQL Injection.... CVE-2025-68914 6.5 MediumDecember 24, 2025
• riello netman 204, riello-ups netman 204 firmware +1 more SQL Injection CVE-2024-8877 EPSS 77.3% 6.9 MediumSeptember 24, 2024
• riello netman 204, riello-ups netman 204 firmware +1 more Unauthenticated Password Reset CVE-2024-8878 10.0 CriticalSeptember 24, 2024