CVE-2025-61028 is a denial of service vulnerability in the time_t_to_dt component of openlink virtuoso-opensource version 7.2.11. Attackers can exploit this flaw by sending specially crafted SQL statements that cause the application to crash or become unavailable. The vulnerability is associated with CWE-89 (Improper Neutralization of Special Elements used in an SQL Command) and CWE-770 (Allocation of Resources Without Limits or Throttling). The CVSS v3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to availability. The Red Hat advisory linked does not provide explicit patch or mitigation details.

Successful exploitation results in denial of service, causing the affected application to become unavailable. There is no impact on confidentiality or integrity according to the CVSS vector. This can disrupt services relying on the vulnerable component.

Patch status is not yet confirmed — check the vendor advisory at https://access.redhat.com/security/cve/CVE-2025-61028 for current remediation guidance. No official fix or temporary workaround is documented in the provided advisory content. Until a patch is available, consider restricting access to the vulnerable service to trusted users and monitor for unusual SQL queries that might trigger the issue.