18
CVEs
9
Critical
7
High
0
KEV
18
PoC
16
Unpatched C/H
0.0%
Patch Rate
0.3%
Avg EPSS
Severity Breakdown
CRITICAL
9
HIGH
7
MEDIUM
2
LOW
0
Monthly CVE Trend
Affected Products (26)
Mozart Next 50 Firmware
17
Mozart Dds Next 30 Firmware
17
Mozart Next 30 Firmware
17
Mozart Next 3000 Firmware
17
Mozart Dds Next 7000 Firmware
17
Mozart Next 7000 Firmware
17
Mozart Next 1000 Firmware
17
Mozart Next 500 Firmware
17
Mozart Dds Next 50 Firmware
17
Mozart Next 100 Firmware
17
Mozart Dds Next 3000 Firmware
17
Mozart Dds Next 6000 Firmware
17
Mozart Next 300 Firmware
17
Mozart Dds Next 500 Firmware
17
Mozart Dds Next 3500 Firmware
17
Mozart Dds Next 100 Firmware
17
Mozart Dds Next 300 Firmware
17
Mozart Next 3500 Firmware
17
Mozart Dds Next 1000 Firmware
17
Mozart Dds Next 2000 Firmware
17
Mozart Next 6000 Firmware
17
Mozart Next 2000 Firmware
17
PHP
15
Sft Dab 600 C Firmware
2
Sft Dab 600 C Bios
1
PostgreSQL
1
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2025-66253 | Unauthenticated OS Command Injection (start_upgrade.php) in DB Electronica Telecomunicazioni S.p.A. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.9 | 0.7% | 70 |
PoC
No patch
|
| CVE-2025-66255 | Unauthenticated Arbitrary File Upload (upgrade_contents.php) in DB Electronica Telecomunicazioni S.p.A. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.9 | 0.3% | 70 |
PoC
No patch
|
| CVE-2025-66256 | Unauthenticated Arbitrary File Upload (patch_contents.php) in DB Electronica Telecomunicazioni S.p.A. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.9 | 0.1% | 70 |
PoC
No patch
|
| CVE-2025-66261 | Unauthenticated OS Command Injection (restore_settings.php) in DB Electronica Telecomunicazioni S.p.A. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.9 | 0.7% | 70 |
PoC
No patch
|
| CVE-2025-66259 | Authenticated Root Remote Code Execution via improrer user input filtering in DB Electronica Telecomunicazioni S.p.A. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.3 | 0.6% | 66 |
PoC
No patch
|
| CVE-2025-66262 | Arbitrary File Overwrite via Tar Extraction Path Traversal in DB Electronica Telecomunicazioni S.p.A. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.3 | 0.2% | 66 |
PoC
No patch
|
| CVE-2025-66250 | Unauthenticated Arbitrary File Upload (status_contents.php) in DB Electronica Telecomunicazioni S.p.A. Rated critical severity (CVSS 9.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.2 | 0.1% | 66 |
PoC
No patch
|
| CVE-2025-66257 | Unauthenticated Arbitrary File Deletion (patch_contents.php) in DB Electronica Telecomunicazioni S.p.A. Rated critical severity (CVSS 9.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.2 | 0.2% | 66 |
PoC
No patch
|
| CVE-2025-66263 | Unauthenticated Arbitrary File Read via Null Byte Injection in DB Electronica Telecomunicazioni S.p.A. Rated high severity (CVSS 8.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 8.9 | 0.1% | 64 |
PoC
No patch
|
| CVE-2025-66252 | Infinite Loop Denial of Service via Failed File Deletion in DB Electronica Telecomunicazioni S.p.A. Rated high severity (CVSS 8.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 8.4 | 0.2% | 62 |
PoC
No patch
|
| CVE-2025-66254 | Unauthenticated Arbitrary File Deletion (upgrade_contents.php) in DB Electronica Telecomunicazioni S.p.A. Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 7.8 | 0.2% | 59 |
PoC
No patch
|
| CVE-2025-66251 | Unauthenticated Path Traversal with Arbitrary File Deletion in DB Electronica Telecomunicazioni S.p.A. Rated high severity (CVSS 7.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 7.7 | 0.7% | 58 |
PoC
No patch
|
| CVE-2025-66260 | PostgreSQL SQL Injection (status_sql.php) in DB Electronica Telecomunicazioni S.p.A. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 7.2 | 0.0% | 56 |
PoC
No patch
|
| CVE-2025-66258 | Stored Cross-Site Scripting via XML Injection in DB Electronica Telecomunicazioni S.p.A. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 7.1 | 0.1% | 56 |
PoC
No patch
|
| CVE-2023-7328 | Screen SFT DAB 600/C firmware versions up to and including 1.9.3 contain an improper access control on the user management API allows unauthenticated requests to retrieve structured user data,. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | MEDIUM | 6.9 | 0.1% | 55 |
PoC
No patch
|