CVE-2025-67108CRITICAL 10.0EPSS p21.4%

CVE-2025-67108CVE-2025-67108

Description

eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connections.

Scoring

CVSS 3.110.0 (CRITICAL)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
EPSS0.30% probability of exploitation · percentile 21.4% · 2026-06-18T12:00:27Z
Published2025-12-23
Last modified2026-01-02

Underlying weaknesses· 2

CWE-298CWE-370

References

  1. http://eprosima.com
  2. http://fast-dds.com
  3. https://gist.github.com/lkloliver/81b5d5a8328d712dbfd497bf11dbe913
  4. https://github.com/eProsima/Fast-DDS/blob/master/src/cpp/security/accesscontrol/Permissions.cpp#L263

2

TypeTargetConfidenceTier
WeaknessImproper Validation of Certificate Expirationcwe-2980%live
WeaknessMissing Check for Certificate Revocation after Initial Checkcwe-3700%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-48906
CVE
CVE-2025-31170
CVE
CVE-2025-67109
CVE
CVE-2025-59611
CVE
CVE-2025-3200
CVE
CVE-2025-27034
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.