Skip to content
OpenAdvisories
Medium · 5.1 CVE-2025-67603 EUVD-2026-1562GHSA-r6jh-234r-fv5v

Lack of client authorization allows arbitrary users to influence the firewall configuration

Published Jan 8, 2026 · Updated Jan 8, 2026 · Assigned by suse

Description

A Improper Authorization vulnerability in Foomuuri llows arbitrary users to influence the firewall configuration.This issue affects Foomuuri: from ? before 0.31.

Affected products

VendorProductAffectedFixed
https://github.com/FoobarOy/ Foomuuri ? – < 0.31 0.31

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 foomuuri 0.31-1 —
Debian 13 foomuuri 0.27-2+deb13u1 DSA-6095-1
ReleasePackageFixed inAdvisory
Ubuntu 25.10 foomuuri 0.27-2+deb13u1build0.25.10.1 USN-8326-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 24.04 LTS foomuuri 0.22-1ubuntu0.1~esm1 USN-8326-1

Advisories 2

References