Mozart Dds Next 100 Firmware
17 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Mozart Dds Next 100 Firmware, a product in the ics ot iot space. Use it to gauge the current risk picture and drill into individual advisories.
Mozart Dds Next 100 Firmware CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 17 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 17 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical11
- High3
- Medium3
Latest CVEs
The 15 most recently published vulnerabilities affecting Mozart Dds Next 100 Firmware.
- CVE-2025-66263Unauthenticated Arbitrary File Read via Null Byte Injection7.5
- CVE-2025-66262Arbitrary File Overwrite via Tar Extraction Path Traversal9.8
- CVE-2025-66261Unauthenticated OS Command Injection (restore_settings.php)9.8
- CVE-2025-66260PostgreSQL SQL Injection (status_sql.php)6.5
- CVE-2025-66259Authenticated Root Remote Code Execution through improper filtering of HTTP post request parameters9.8
- CVE-2025-66258Stored Cross-Site Scripting via XML Injection5.4
- CVE-2025-66257Unauthenticated Arbitrary File Deletion (patch_contents.php)9.1
- CVE-2025-66256Unauthenticated Arbitrary File Upload (patch_contents.php)9.8
- CVE-2025-66255Unauthenticated Arbitrary File Upload (upgrade_contents.php)9.8
- CVE-2025-66254Unauthenticated Arbitrary File Deletion (upgrade_contents.php)9.1
- CVE-2025-66253Unauthenticated OS Command Injection (start_upgrade.php)9.8
- CVE-2025-66252Infinite Loop Denial of Service via Failed File Deletion7.5
- CVE-2025-66251Unauthenticated Path Traversal with Arbitrary File Deletion9.1
- CVE-2025-66250Unauthenticated Arbitrary File Upload (status_contents.php)9.8
- CVE-2025-63227The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unrestricted file upload vulnerability in the /patch.php endpoint. An attacker with administrative credenti...7.2
Product grouping is registry-driven, with AI assist and human review. How it works