Critical 9.8 CVSS flaws in Vertiv UPS cards can cripple data centers
Team82 discovered two CVSS 9.8 vulnerabilities—CVE‑2025‑46412 (auth bypass) and CVE‑2025‑41426 (RCE)—in Vertiv’s Liebert IS‑UNITY‑DP UPS network cards. Exploiting them could let an attacker take control of power infrastructure, shut down servers, and cause extensive downtime in data centers. Vertiv has issued firmware patches, but unpatched units remain a high‑impact attack surface.