CVE-2025-41766
Published: 09 March 2026
Summary
CVE-2025-41766 is a high-severity Out-of-bounds Write (CWE-787) vulnerability in Mbs-Solutions Universal Bacnet Router Firmware. Its CVSS base score is 8.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 37.8th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).
Deeper analysis
CVE-2025-41766 is a stack-based buffer overflow vulnerability (CWE-787) that can be triggered via a crafted HTTP POST request using the ubr-network method, resulting in full device compromise. Published on 2026-03-09T09:16:01.173, it carries a CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating high severity due to its network accessibility, low attack complexity, and requirements for only low privileges.
A low-privileged remote attacker can exploit this vulnerability by sending a specially crafted HTTP POST request targeting the ubr-network method, causing a stack-based buffer overflow. Successful exploitation enables full compromise of the affected device, granting high levels of confidentiality, integrity, and availability impact without requiring user interaction or privilege escalation beyond low privileges.
Mitigation details are available in the referenced advisory at https://www.mbs-solutions.de/mbs-2025-0001.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-208378
Vulnerability details
A low-privileged remote attacker can trigger a stack-based buffer overflow via a crafted HTTP POST request using the ubr-network method resulting in full device compromise.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Direct remote exploitation of a network-accessible service via crafted HTTP request leading to arbitrary code execution and full device compromise.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly remediates the stack-based buffer overflow flaw by identifying, testing, and applying vendor updates or patches for the ubr-network HTTP method vulnerability.
Enforces validation of HTTP POST request inputs for the ubr-network method to reject crafted payloads that trigger stack-based buffer overflows.
Implements memory protections such as stack canaries, ASLR, and DEP to prevent exploitation of stack-based buffer overflows even if invalid inputs are processed.