CVE-2025-67109 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Improper verification of the time certificate in Eclipse Cyclone DDS before v0.10.5 allows attackers to bypass certificate checks and execute commands with Syst…
Critical CVSS: 10.0

CVE-2025-67109

Improper verification of the time certificate in Eclipse Cyclone DDS before v0.10.5 allows attackers to bypass certificate checks and execute commands with System privileges.
Vendor
Eclipse
Product
Cyclone Data Distribution Service
CWE
CWE-298
Yayın Tarihi
2025-12-23 16:16:23
Güncelleme
2026-01-06 17:42:00
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-298 Cyclone Data Distribution Service CRITICAL Eclipse 2025

Referanslar

http://eclipse.com https://gist.github.com/lkloliver/669e15bc7e6194133e4ee1026ce157e6 https://github.com/eclipse-cyclonedds/cyclonedds/blob/master/src/ddsrt/src/time/posix/time.c#L28 https://github.com/eclipse-cyclonedds/cyclonedds/blob/master/src/security/builtin_plugins/authentication/src/auth_utils.c#L84