No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time.
Credit: Vera Mens (Claroty Team82)
From CISA's machine-readable CSAF 2.0 advisory (JSON).
| CVE | Weakness | CVSS v3 | Details |
|---|---|---|---|
| CVE-2025-41426 | CWE-121 Stack-based Buffer Overflow | 9.8 Critical |
Affected Vertiv products contain a stack based buffer overflow vulnerability. An attacker could exploit this vulnerability to gain code execution on the device. Mitigation: Vertiv recommends that users take the following actions: Vendor fix: Update Liebert RDU101 to v1.9.1.2_0000001 Mitigation: Update IS-UNITY to v8.4.3.1_00160 Affected, fixed & timelineAffected:
Mitigation: For more information please contact Vertiv. |
| CVE-2025-46412 | CWE-288 Authentication Bypass Using an Alternate Path or Channel | 9.8 Critical |
Affected Vertiv products do not properly protect webserver functions that could allow an attacker to bypass authentication. Mitigation: Vertiv recommends that users take the following actions: Vendor fix: Update Liebert RDU101 to v1.9.1.2_0000001 Mitigation: Update IS-UNITY to v8.4.3.1_00160 Affected, fixed & timelineAffected:
Mitigation: For more information please contact Vertiv. |
Scores and weakness types are as CISA or the republishing vendor stated them in this advisory; the linked CVE pages carry the independently enriched CVSS and SSVC assessments.
No coverage found in monitored research blogs or news feeds.
| CVE | CVSS | Affected |
|---|---|---|
| CVE-2025-41426 | 9.3 Critical | Vertiv Liebert RDU101 Affected Vertiv products contain a stack based buffer overflow vulnerability. An attacker could exploit this vulnerability to gain code execution on … |
| CVE-2025-46412 | 9.3 Critical | Vertiv Liebert RDU101 Affected Vertiv products do not properly protect webserver functions that could allow an attacker to bypass authentication. |
Named by the advisory itself. Each CVE links to its tracked detail page.
No KEV-catalogued vendors are named in this publication.