CVE-2025-67858

HighCVSS 7.0

Published: 08/01/2026(UTC)Updated: 11/10/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

8th percentile - higher than 8% of all known CVEs

Summary

Foomuuri, a firewall management tool, has a vulnerability involving improper neutralization of argument delimiters, which can lead to integrity loss of the firewall configuration or further unspecified impact by manipulating the JSON configuration passed to `nft`. This issue affects versions before 0.31.

Risk Assessment

The risk includes the possibility of compromising the integrity of the firewall configuration, which could lead to unauthorized changes in rules and weakening of network security.

Recommendation

It is recommended to update Foomuuri to version 0.31 or later, which contains a fix for the vulnerability.

Other vulnerabilities in Foomuuri

CVE-2025-67603Medium
Foomuuri contains an improper authorization vulnerability that allows arbitrary users to influence the firewall configuration. This issue affects versions before 0.31.

Original NVD description (English source)

A Improper Neutralization of Argument Delimiters vulnerability in Foomuuri can lead to integrity loss of the firewall configuration or further unspecified impact by manipulating the JSON configuration passed to `nft`. This issue affects Foomuuri: from ? before 0.31.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS