Mozart next 6000 firmware

This hub aggregates every CVE we track for Mozart next 6000 firmware, a product in the ics ot iot space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Mozart next 6000 firmware.

• CVE-2025-66263Unauthenticated Arbitrary File Read via Null Byte Injection7.5Nov 26, 2025
• CVE-2025-66262Arbitrary File Overwrite via Tar Extraction Path Traversal9.8Nov 26, 2025
• CVE-2025-66261Unauthenticated OS Command Injection (restore_settings.php)9.8Nov 26, 2025
• CVE-2025-66260PostgreSQL SQL Injection (status_sql.php)6.5Nov 26, 2025
• CVE-2025-66259Authenticated Root Remote Code Execution through improper filtering of HTTP post request parameters9.8Nov 26, 2025
• CVE-2025-66258Stored Cross-Site Scripting via XML Injection5.4Nov 26, 2025
• CVE-2025-66257Unauthenticated Arbitrary File Deletion (patch_contents.php)9.1Nov 26, 2025
• CVE-2025-66256Unauthenticated Arbitrary File Upload (patch_contents.php)9.8Nov 26, 2025
• CVE-2025-66255Unauthenticated Arbitrary File Upload (upgrade_contents.php)9.8Nov 26, 2025
• CVE-2025-66254Unauthenticated Arbitrary File Deletion (upgrade_contents.php)9.1Nov 26, 2025
• CVE-2025-66253Unauthenticated OS Command Injection (start_upgrade.php)9.8Nov 26, 2025
• CVE-2025-66252Infinite Loop Denial of Service via Failed File Deletion7.5Nov 26, 2025
• CVE-2025-66251Unauthenticated Path Traversal with Arbitrary File Deletion9.1Nov 26, 2025
• CVE-2025-66250Unauthenticated Arbitrary File Upload (status_contents.php)9.8Nov 26, 2025
• CVE-2025-63227The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unrestricted file upload vulnerability in the /patch.php endpoint. An attacker with administrative credenti...7.2Nov 18, 2025