Is CVE-2025-71318 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2025-71318 being exploited in the wild.

How severe is CVE-2025-71318?

Critical severity, with a CVSS score of 9.8, published 5 June 2026.

Which products and versions are affected?

Riello UPS NetMan 204 All versions up to and including 2025 releases.

Is there a fix for CVE-2025-71318?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2025-71318 attacked?

It is attacked over the network, in device firmware.

Am I affected by CVE-2025-71318?

Check whether you run Riello UPS NetMan 204 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-71318: Riello UPS NetMan 204 missing authentication in administrative interface

CVE-2025-71318 · Severity: critical · CVSS 9.8 · Published 2026-06-05

The NetMan 204 network agent, used to manage Uninterruptible Power Supply (UPS) systems, fails to require a password for its administrative interface. This allows an unauthorized person to remotely access sensitive configuration data or issue commands to shut down, reboot, or bypass the power supply. Such an attack could lead to immediate power loss for connected servers and critical infrastructure, causing significant operational downtime.

Vendors: Riello UPS.

Quick answers

Is CVE-2025-71318 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2025-71318 being exploited in the wild.
How severe is CVE-2025-71318?: Critical severity, with a CVSS score of 9.8, published 5 June 2026.
Which products and versions are affected?: Riello UPS NetMan 204 All versions up to and including 2025 releases.
Is there a fix for CVE-2025-71318?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2025-71318 attacked?: It is attacked over the network, in device firmware.
Am I affected by CVE-2025-71318?: Check whether you run Riello UPS NetMan 204 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The NetMan 204 firmware contains a missing authentication vulnerability (CWE-306) affecting its web-based management interface. Remote, unauthenticated attackers can bypass the login screen by directly requesting administrative HTML pages and CGI endpoints. This exposure allows for the disclosure of LDAP configurations, firmware details, and active user sessions. Furthermore, attackers can invoke critical UPS functions via command endpoints, including 'shutdown', 'reboot', 'switch-on-bypass', and 'battery-test', without providing credentials. The vulnerability is easily exploitable via direct HTTP requests to paths such as /administration-commands.html and /configuration.html.

Affected products

Riello UPS NetMan 204 All versions up to and including 2025 releases

Timeline

2025-02-04: other: Vulnerability discovered by researcher
2025-04-11: disclosed: Exploit details published on Exploit-DB
2026-06-05: advisory: CVE published and NVD record created

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.