CVE-2025-67109

Published: Dec 23, 2025

Modified: Dec 23, 2025

PUBLISHED

Description

Improper verification of the time certificate in Eclipse Cyclone DDS before v0.10.5 allows attackers to bypass certificate checks and execute commands with System privileges.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://eclipse.com

https://github.com/eclipse-cyclonedds/cyclonedds/blob/master/src/ddsrt/src/time/posix/time.c#L28

https://github.com/eclipse-cyclonedds/cyclonedds/blob/master/src/security/builtin_plugins/authentication/src/auth_utils.c#L84

https://gist.github.com/lkloliver/669e15bc7e6194133e4ee1026ce157e6

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2025-67109

Description

Affected Products

References