PT-2026-1886

CVE-2025-67858

Published

2026-01-07

Updated

2026-05-27

Description by

CVSS 4.0

7.0

High

MetricsAV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Foomuuri versions prior to 0.27-2+deb13u1 Foomuuri versions prior to 0.31

Description An Improper Neutralization of Argument Delimiters issue exists in Foomuuri, potentially leading to integrity loss of the firewall configuration or other unspecified impacts. This occurs through manipulation of the JSON configuration passed to nft. The issue is triggered by a crafted interface input parameter.

Recommendations Upgrade Foomuuri packages to version 0.27-2+deb13u1. For versions prior to 0.31, upgrade to a later version.

Exploitability

Fix

Impacts

Researchers

Matthias Gerstner

Vendors

Affected products

Weakness enumeration

CWE-88: Improper Neutralization of Argument Delimiters in a Command (\'Argument Injection\')

Related identifiers

CVE-2025-67858