PT-2026-1882 · Foomuuri · Foomuuri

Matthias Gerstner · Published 2026-01-07 · Updated 2026-05-27 · CVE-2025-67603

Positive Technologies (AI Summary)

CVSS v4.0

5.1

Medium

Base vector

AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Foomuuri versions prior to 0.31 Foomuuri version 0.27-2+deb13u1

Description An improper authorization issue in Foomuuri allows unauthorized users to modify the firewall configuration. This could lead to tampering of the firewall configuration.

Recommendations Upgrade Foomuuri to version 0.27-2+deb13u1. For versions prior to 0.31, upgrade to a later version.

Fix

Improper Authorization

Weakness Enumeration

CWE-285

Related Identifiers

CVE-2025-67603

DSA-6095-1

USN-8326-1

Affected Products

Foomuuri

References · 16

• https://osv.dev/vulnerability/DSA-6095-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8326-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-67603 · Security Note
• https://osv.dev/vulnerability/USN-8326-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-67603 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-67603 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-67858 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-67603 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-67603 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-67603 · Vendor Advisory
• https://t.me/CVEtracker/41726 · Telegram Post
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-67603 · Note
• https://twitter.com/CVEnew/status/2009291491399610654 · Twitter Post
• https://security.opensuse.org/2026/01/07/foomuuri-lack-of-dbus-authorization.html · Note
• https://twitter.com/oss_security/status/2009490893716508926 · Twitter Post