CVE-2025-67858CWE-88

CVE-2025-67858

published January 8, 2026

CVSS
7.0
EPSS
0%
Percentile
7.9
In the wild
Unconfirmed
What it is

A Improper Neutralization of Argument Delimiters vulnerability in Foomuuri can lead to integrity loss of the firewall configuration or further unspecified impact by manipulating the JSON configuration passed to `nft`.

This issue affects Foomuuri: from ? before 0.31.

The record
Technical detail
CVSS
7.0 · NONE
CVSS v4.0
Not supplied
EPSS
0.00188 · 7.9th percentile
Weakness
CWE-88 · Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
Published
2026-01-08T21:15Z
References (2)
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-67858 · [email protected]https://security.opensuse.org/2026/01/07/foomuuri-lack-of-dbus-authorization.html · [email protected]
EPSS history
Timeline
  • 08 JAN 15:23Z
    A crafted "interface" input parameter can lead to integrity loss of the firewall configuration
    cvelistv5