CVE-2025-32355

Rocket TRUfusion Enterprise through 7.10.4.0 uses a reverse proxy to handle incoming connections

High · published February 17, 2026

CVSS v4.0
7.9
EPSS
1%
Percentile
69.9
In the wild
Unconfirmed
What it is

Rocket TRUfusion Enterprise through 7.10.4.0 uses a reverse proxy to handle incoming connections. However, the proxy is misconfigured in a way that allows specifying absolute URLs in the HTTP request line, causing the proxy to load the given resource.

The record
Technical detail
CVSS v4.0
7.9 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H
EPSS
0.01284 · 69.9th percentile
Published
2026-02-17T00:00Z
EPSS history
Timeline
  • 17 FEB 00:00Z
    Rocket TRUfusion Enterprise through 7.10.4.0 uses a reverse proxy to handle incoming connections
    cvelistv5