A vulnerability classified as problematic has been found in sbabic swupdate up to 2025.12. This impacts the function mg_http_multipart_continue_wait_for_chunk of the file mongoose_multipart.c. The manipulation leads to integer underflow.

This vulnerability is referenced as CVE-2026-28525. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to install a patch to address this issue.