What’s Vulnerable › Products

Dbbroadcast Mozart Next 300 Firmware vulnerabilities

17 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 17 published in the last 12 months.

Check whether your Dbbroadcast Mozart Next 300 Firmware version is affected

Latest Dbbroadcast Mozart Next 300 Firmware vulnerabilities

• CVE-2025-66263 — Unauthenticated Arbitrary File Read via Null Byte Injection (CVSS 7.5)
• CVE-2025-66262 — Arbitrary File Overwrite via Tar Extraction Path Traversal (CVSS 9.8)
• CVE-2025-66261 — Unauthenticated OS Command Injection (restore_settings.php) (CVSS 9.8)
• CVE-2025-66260 — PostgreSQL SQL Injection (status_sql.php) (CVSS 6.5)
• CVE-2025-66259 — Authenticated Root Remote Code Execution through improper filtering of HTTP post request parameters (CVSS 9.8)
• CVE-2025-66258 — Stored Cross-Site Scripting via XML Injection (CVSS 5.4)
• CVE-2025-66257 — Unauthenticated Arbitrary File Deletion (patch_contents.php) (CVSS 9.1)
• CVE-2025-66256 — Unauthenticated Arbitrary File Upload (patch_contents.php) (CVSS 9.8)
• CVE-2025-66255 — Unauthenticated Arbitrary File Upload (upgrade_contents.php) (CVSS 9.8)
• CVE-2025-66254 — Unauthenticated Arbitrary File Deletion (upgrade_contents.php) (CVSS 9.1)
• CVE-2025-66253 — Unauthenticated OS Command Injection (start_upgrade.php) (CVSS 9.8)
• CVE-2025-66252 — Infinite Loop Denial of Service via Failed File Deletion (CVSS 7.5)
• CVE-2025-66251 — Unauthenticated Path Traversal with Arbitrary File Deletion (CVSS 9.1)
• CVE-2025-66250 — Unauthenticated Arbitrary File Upload (status_contents.php) (CVSS 9.8)
• CVE-2025-63229 — (CVSS 5.4)
• CVE-2025-63228 — (CVSS 9.8)
• CVE-2025-63227 — (CVSS 7.2)