CVE-2025-32433
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.
- Record
CVE-2025-32433- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-306
- Updated
- 2026-11-02
EUVDEUVD-2025-11793
Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.
- Record
EUVD-2025-11793- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
CISA KEV No score
Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability
Erlang Erlang/OTP SSH server contains a missing authentication for critical function vulnerability. This could allow an attacker to execute arbitrary commands without valid credentials, potentially leading to unauthenticated remote code execution (RCE). By exploiting a flaw in how SSH protocol messages are handled, a malicious actor could gain unauthorized access to affected systems. This vulnerability could affect various products that implement Erlang/OTP SSH server, including—but not limited to—Cisco, NetApp, and SUSE.
- Record
CVE-2025-32433- Weakness
- CWE-306
- Updated
- 2026-11-02
NVD
Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.
- Record
CVE-2025-32433- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-306
- Updated
- 2026-11-02
OSVALPINE-CVE-2025-32433
Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.
- Record
ALPINE-CVE-2025-32433- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-03
OSV
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.
- Record
CVE-2025-32433- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-306
- Updated
- 2026-11-02
Show 10 moreShow less
OSVDEBIAN-CVE-2025-32433
Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.
- Record
DEBIAN-CVE-2025-32433- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2025-1461
erlang security update
Security Fix(es):
Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.(CVE-2025-32433)
- Record
OESA-2025-1461- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-32433
Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.
- Record
UBUNTU-CVE-2025-32433- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVAZL-60441 No score
CVE-2025-32433 affecting package erlang for versions less than 26.2.5.11-1
Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.
- Record
AZL-60441- Updated
- 2026-11-02
OSVAZL-60583 No score
CVE-2025-32433 affecting package erlang for versions less than 25.3.2.20-1
Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.
- Record
AZL-60583- Updated
- 2026-11-02
OSVSUSE-SU-2025:1356-1 No score
Security update for erlang26
This update for erlang26 fixes the following issues:
- CVE-2025-30211: Fixed KEX init error results with excessive memory usage (bsc#1240390)
- CVE-2025-32433: Fixed unauthenticated remote code execution in Erlang/OTP SSH (bsc#1241300)
- Record
SUSE-SU-2025:1356-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:1357-1 No score
Security update for erlang
This update for erlang fixes the following issues:
- CVE-2025-32433: Fixed unauthenticated remote code execution in Erlang/OTP SSH (bsc#1241300)
- Record
SUSE-SU-2025:1357-1- Updated
- 2026-11-02
OSVUSN-7443-1 No score
erlang vulnerability
Fabian Bäumer, Marcel Maehren, Marcus Brinkmann, and Jörg Schwenk discovered that Erlang OTP’s SSH module incorrect handled authentication. A remote attacker could use this issue to execute arbitrary commands without authentication, possibly leading to a system compromise.
- Record
USN-7443-1- Updated
- 2026-11-02
OSVUSN-7443-2 No score
erlang vulnerability
USN-7443-1 fixed a vulnerability in Erlang. This update provides the corresponding update for Ubuntu 25.04.
Original advisory details:
Fabian Bäumer, Marcel Maehren, Marcus Brinkmann, and Jörg Schwenk discovered that Erlang OTP’s SSH module incorrect handled authentication. A remote attacker could use this issue to execute arbitrary commands without authentication, possibly leading to a system compromise.
- Record
USN-7443-2- Updated
- 2026-11-02
OSVUSN-7443-3 No score
erlang vulnerability
USN-7443-1 fixed a vulnerability in Erlang. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.
Original advisory details:
Fabian Bäumer, Marcel Maehren, Marcus Brinkmann, and Jörg Schwenk discovered that Erlang OTP’s SSH module incorrect handled authentication. A remote attacker could use this issue to execute arbitrary commands without authentication, possibly leading to a system compromise.
- Record
USN-7443-3- Updated
- 2026-11-02
Affected products
- erlang erlang/otp
- erlang otp
- erlang erlang\/otp
- cisco cloud native broadband network gateway
- cisco confd basic
- cisco enterprise nfv infrastructure software
- cisco inode manager
- cisco ncs 2000 shelf virtualization orchestrator firmware
- cisco network services orchestrator
- cisco optical site manager
- cisco rv160 firmware
- cisco rv160w firmware
Affected packages
| Package | Affected | Fixed |
|---|---|---|
erlangAlpine:v3.21 |
before 26.2.5.11-r0 | 26.2.5.11-r0 |
erlangAzure Linux:3 |
before 26.2.5.11-1 | 26.2.5.11-1 |
erlangAzure Linux:2 |
before 25.3.2.20-1 | 25.3.2.20-1 |
erlangDebian:12 |
before 1:25.2.3+dfsg-1+deb12u1, plus listed versions 1:25.2.3+dfsg-1 |
1:25.2.3+dfsg-1+deb12u1 |
erlangDebian:13 |
before 1:27.3.3+dfsg-1 | 1:27.3.3+dfsg-1 |
erlangDebian:14 |
before 1:27.3.3+dfsg-1 | 1:27.3.3+dfsg-1 |
erlangDebian:11 |
before 1:23.2.6+dfsg-1+deb11u2, plus listed versions 1:23.2.6+dfsg-11:23.2.6+dfsg-1+deb11u1 |
1:23.2.6+dfsg-1+deb11u2 |
erlangopenEuler:20.03-LTS-SP4 |
before 21.3.3-6.oe2003sp4 | 21.3.3-6.oe2003sp4 |
erlangopenEuler:22.03-LTS-SP3 |
before 23.3.4.9-6.oe2203sp3 | 23.3.4.9-6.oe2203sp3 |
erlangopenEuler:22.03-LTS-SP4 |
before 23.3.4.9-6.oe2203sp4 | 23.3.4.9-6.oe2203sp4 |
Show 26 moreShow less
| Package | Affected | Fixed |
|---|---|---|
erlangopenEuler:24.03-LTS |
before 25.3.2.6-6.oe2403sp1 | 25.3.2.6-6.oe2403sp1 |
erlangopenEuler:24.03-LTS-SP1 |
before 25.3.2.6-6.oe2403sp1 | 25.3.2.6-6.oe2403sp1 |
erlang26SUSE:Linux Enterprise Module for Server Applications 15 SP6 |
before 26.2.1-150300.7.11.1 | 26.2.1-150300.7.11.1 |
erlang26openSUSE:Leap 15.6 |
before 26.2.1-150300.7.11.1 | 26.2.1-150300.7.11.1 |
erlangSUSE:Linux Enterprise Module for Server Applications 15 SP6 |
before 23.3.4.19-150300.3.20.1 | 23.3.4.19-150300.3.20.1 |
erlangSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS |
before 23.3.4.19-150300.3.20.1 | 23.3.4.19-150300.3.20.1 |
erlangSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS |
before 23.3.4.19-150300.3.20.1 | 23.3.4.19-150300.3.20.1 |
erlangSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS |
before 23.3.4.19-150300.3.20.1 | 23.3.4.19-150300.3.20.1 |
erlangSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS |
before 23.3.4.19-150300.3.20.1 | 23.3.4.19-150300.3.20.1 |
erlangSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS |
before 23.3.4.19-150300.3.20.1 | 23.3.4.19-150300.3.20.1 |
erlangSUSE:Linux Enterprise Server 15 SP3-LTSS |
before 23.3.4.19-150300.3.20.1 | 23.3.4.19-150300.3.20.1 |
erlangSUSE:Linux Enterprise Server 15 SP4-LTSS |
before 23.3.4.19-150300.3.20.1 | 23.3.4.19-150300.3.20.1 |
erlangSUSE:Linux Enterprise Server 15 SP5-LTSS |
before 23.3.4.19-150300.3.20.1 | 23.3.4.19-150300.3.20.1 |
erlangSUSE:Linux Enterprise Server for SAP Applications 15 SP3 |
before 23.3.4.19-150300.3.20.1 | 23.3.4.19-150300.3.20.1 |
erlangSUSE:Linux Enterprise Server for SAP Applications 15 SP4 |
before 23.3.4.19-150300.3.20.1 | 23.3.4.19-150300.3.20.1 |
erlangSUSE:Linux Enterprise Server for SAP Applications 15 SP5 |
before 23.3.4.19-150300.3.20.1 | 23.3.4.19-150300.3.20.1 |
erlangSUSE:Manager Proxy 4.3 |
before 23.3.4.19-150300.3.20.1 | 23.3.4.19-150300.3.20.1 |
erlangSUSE:Manager Server 4.3 |
before 23.3.4.19-150300.3.20.1 | 23.3.4.19-150300.3.20.1 |
erlangSUSE:Enterprise Storage 7.1 |
before 23.3.4.19-150300.3.20.1 | 23.3.4.19-150300.3.20.1 |
erlangopenSUSE:Leap 15.6 |
before 23.3.4.19-150300.3.20.1 | 23.3.4.19-150300.3.20.1 |
erlangUbuntu:Pro:16.04:LTS |
before 1:18.3-dfsg-1ubuntu3.1+esm1, plus listed versions 1:18.0-dfsg-1ubuntu11:18.0-dfsg-1ubuntu21:18.2-dfsg-2ubuntu11:18.3-dfsg-1ubuntu11:18.3-dfsg-1ubuntu21:18.3-dfsg-1ubuntu31:18.3-dfsg-1ubuntu3.1 |
1:18.3-dfsg-1ubuntu3.1+esm1 |
erlangUbuntu:Pro:18.04:LTS |
before 1:20.2.2+dfsg-1ubuntu2+esm1, plus listed versions 1:20.0.4+dfsg-1ubuntu11:20.1.2+dfsg-1ubuntu11:20.1.3+dfsg-1ubuntu11:20.1.4+dfsg-1ubuntu11:20.1.5+dfsg-1ubuntu1 Show 5 moreShow less1:20.1.6+dfsg-1ubuntu11:20.1.7+dfsg-1ubuntu11:20.2.1+dfsg-1ubuntu11:20.2.2+dfsg-1ubuntu11:20.2.2+dfsg-1ubuntu2 |
1:20.2.2+dfsg-1ubuntu2+esm1 |
erlangUbuntu:20.04:LTS |
before 1:22.2.7+dfsg-1ubuntu0.5, plus listed versions 1:22.0.7+dfsg-1build11:22.2+dfsg-11:22.2.1+dfsg-11:22.2.2+dfsg-11:22.2.3+dfsg-1 Show 6 moreShow less1:22.2.3+dfsg-21:22.2.4+dfsg-11:22.2.7+dfsg-11:22.2.7+dfsg-1ubuntu0.21:22.2.7+dfsg-1ubuntu0.31:22.2.7+dfsg-1ubuntu0.4 |
1:22.2.7+dfsg-1ubuntu0.5 |
erlangUbuntu:22.04:LTS |
before 1:24.2.1+dfsg-1ubuntu0.4, plus listed versions 1:23.2.6+dfsg-1build11:24.1.1+dfsg-11:24.1.4+dfsg-11:24.1.5+dfsg-11:24.1.5+dfsg-1ubuntu1 Show 5 moreShow less1:24.2+dfsg-11:24.2.1+dfsg-11:24.2.1+dfsg-1ubuntu0.11:24.2.1+dfsg-1ubuntu0.21:24.2.1+dfsg-1ubuntu0.3 |
1:24.2.1+dfsg-1ubuntu0.4 |
erlangUbuntu:24.04:LTS |
before 1:25.3.2.8+dfsg-1ubuntu4.3, plus listed versions 1:25.2.3+dfsg-11:25.3.2.8+dfsg-11:25.3.2.8+dfsg-1ubuntu11:25.3.2.8+dfsg-1ubuntu31:25.3.2.8+dfsg-1ubuntu41:25.3.2.8+dfsg-1ubuntu4.11:25.3.2.8+dfsg-1ubuntu4.2 |
1:25.3.2.8+dfsg-1ubuntu4.3 |
erlangUbuntu:25.04 |
before 1:27.3+dfsg-1ubuntu1.1, plus listed versions 1:25.3.2.12+dfsg-1ubuntu21:27.2+dfsg-21:27.2.1+dfsg-11:27.2.1+dfsg-21:27.2.2+dfsg-1 Show 4 moreShow less1:27.2.3+dfsg-11:27.2.4+dfsg-11:27.3+dfsg-11:27.3+dfsg-1ubuntu1 |
1:27.3+dfsg-1ubuntu1.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Metasploit | Erlang OTP Pre-Auth RCE Scanner and Exploit | 2025-04-16 |
| PoC in GitHub | LemieOne/CVE-2025-32433 | 2025-04-18 |
| PoC in GitHub | ProDefense/CVE-2025-32433 | 2025-04-18 |
| PoC in GitHub | darses/CVE-2025-32433 | 2025-04-18 |
| PoC in GitHub | ekomsSavior/POC_CVE-2025-32433 | 2025-04-18 |
| PoC in GitHub | exa-offsec/ssh_erlangotp_rce | 2025-04-18 |
| PoC in GitHub | m0usem0use/erl_mouse | 2025-04-18 |
| PoC in GitHub | omer-efe-curkus/CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC | 2025-04-18 |
| PoC in GitHub | teamtopkarl/CVE-2025-32433 | 2025-04-18 |
| PoC in GitHub | 0xPThree/cve-2025-32433 | 2025-04-19 |
Show 16 moreShow less
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | meloppeitreet/CVE-2025-32433-Remote-Shell | 2025-04-19 |
| PoC in GitHub | ps-interactive/lab_CVE-2025-32433 | 2025-04-24 |
| PoC in GitHub | 0x7556/CVE-2025-32433 | 2025-04-25 |
| PoC in GitHub | becrevex/CVE-2025-32433 | 2025-04-25 |
| PoC in GitHub | MrDreamReal/CVE-2025-32433 | 2025-04-27 |
| PoC in GitHub | Know56/CVE-2025-32433 | 2025-04-28 |
| PoC in GitHub | ODST-Forge/CVE-2025-32433_PoC | 2025-04-29 |
| PoC in GitHub | abrewer251/CVE-2025-32433_Erlang-OTP_PoC | 2025-04-29 |
| PoC in GitHub | bilalz5-github/Erlang-OTP-SSH-CVE-2025-32433 | 2025-05-02 |
| PoC in GitHub | vigilante-1337/CVE-2025-32433 | 2025-05-03 |
| PoC in GitHub | NiteeshPujari/CVE-2025-32433-PoC | 2025-08-13 |
| PoC in GitHub | te0rwx/CVE-2025-32433-Detection | 2025-08-27 |
| PoC in GitHub | Mdusmandasthaheer/CVE-2025-32433 | 2025-08-28 |
| PoC in GitHub | dollarboysushil/CVE-2025-32433-Erlang-OTP-SSH-Unauthenticated-RCE | 2025-09-07 |
| PoC in GitHub | iteride/CVE-2025-32433 | 2025-09-18 |
| PoC in GitHub | mirmeweu/cve-2025-32433 | 2025-09-24 |
Plus 17 more. The full list has every link.
History
| Recorded | Changed | Sources |
|---|---|---|
| exploits_more | PoC in GitHub | |
| exploitation | ||
| affected, aliases, references | OSV | |
| exploits, exploits_more | ||
| first indexed | CVE List, EUVD, CISA KEV, Metasploit, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-32433 is a critical vulnerability (CVSS 10.0) in Erlang Erlang/otp, published April 16, 2025. CISA lists it as known to be exploited, since June 9, 2025. EUVD reports exploitation since June 9, 2025. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 98.9%, the 99th percentile. Fixed in erlang 26.2.5.11-r0.
References
github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2
openwall.com/lists/oss-security/2025/04/16/2
Show 25 moreShow less
security.netapp.com/advisory/ntap-20250425-0001
lists.debian.org/debian-lts-announce/2025/04/msg00028.html
sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-erlang-otp-ssh-xyZZy
cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-32433
security.alpinelinux.org/vuln/CVE-2025-32433
nvd.nist.gov/vuln/detail/CVE-2025-32433
security-tracker.debian.org/tracker/CVE-2025-32433
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-1461
suse.com/support/update/announcement/2025/suse-su-20251356-1
bugzilla.suse.com/1240390
ubuntu.com/security/CVE-2025-32433
cve.org/CVERecord?id=CVE-2025-32433