CVE-2025-67603CWE-285

CVE-2025-67603

published January 8, 2026

CVSS

5.1

EPSS

Percentile

5.2

In the wild

Unconfirmed

What it is

A Improper Authorization vulnerability in Foomuuri llows arbitrary users to influence the firewall configuration.This issue affects Foomuuri: from ? before 0.31.

The record

Technical detail

CVSS: 5.1 · NONE
CVSS v4.0: Not supplied
EPSS: 0.00163 · 5.2th percentile
Weakness: CWE-285 · Improper Authorization
Published: 2026-01-08T20:15Z

References (2)

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-67603 · [email protected]https://security.opensuse.org/2026/01/07/foomuuri-lack-of-dbus-authorization.html · [email protected]

EPSS history

Timeline

08 JAN 15:04Z
Lack of client authorization allows arbitrary users to influence the firewall configuration
cvelistv5