Search: CVE-2025-32802

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.1	EPSS 0.2%	CVE-2025-32802ISC Kea · External Control of File Name or Path Medium6.1EPSS 0.2%2025-05-28CVE Database V5CVE-2025-32802 Kea configuration and API directives can be used to overwrite arbitrary files, subject to permissions granted to Kea. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the control sockets in insecure paths. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8. EPSS 0.2%Vulnerability CWE-73	CVE Database V5	2025-05-28

Page 1 of 1