CVE-2025-67109
Critical · 10.0CVSS
10.0
EPSS
0.3%
Published
Dec 23, 2025
CISA due date
—
The record
Improper verification of the time certificate in Eclipse Cyclone DDS before v0.10.5 allows attackers to bypass certificate checks and execute commands with System privileges.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-86231 A security flaw has been discovered in mwiede jsch up to 2.28.5. CWE-298
- CVE-2024-1248 The silent Just-In-Time (JIT) provisioning feature in federated authentication… CWE-298
- CVE-2025-67108 eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket… CWE-298
- CVE-2025-61736 Successful exploitation of this vulnerability could result in the product failing to… CWE-298