CVE-2025-67603

MediumCVSS 5.1

Published: 08/01/2026(UTC)Updated: 30/09/2026(UTC)Translated: 01/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

4th percentile - higher than 4% of all known CVEs

Summary

Foomuuri contains an improper authorization vulnerability that allows arbitrary users to influence the firewall configuration. This issue affects versions before 0.31.

Risk Assessment

Unauthorized users can modify firewall rules, potentially opening dangerous ports or blocking legitimate traffic. This can compromise network security and service availability.

Recommendation

Update Foomuuri to version 0.31 or later. Restrict access to the firewall management interface to trusted users only.

Other vulnerabilities in Foomuuri

CVE-2025-67858High
Foomuuri, a firewall management tool, has a vulnerability involving improper neutralization of argument delimiters, which can lead to integrity loss of the firewall configuration or further unspecified impact by manipulating the JSON configuration passed to `nft`. This issue affects versions before 0.31.

Original NVD description (English source)

A Improper Authorization vulnerability in Foomuuri llows arbitrary users to influence the firewall configuration.This issue affects Foomuuri: from ? before 0.31.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS