First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-32942

HighCVSS 7.2/10Last modified Oct 12, 2026

Description

SSH Tectia Server before 6.6.6 sometimes allows attackers to read and alter a user's session traffic.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:L

Weakness enumeration

Affected software

Vendor	Product	Versions
SSH	Tectia Server	< 6.4.21; >= 6.5.0, < 6.5.3; >= 6.6.0, < 6.6.6; >= 6.7.0, < 7.0.0

References

https://info.ssh.com/tectia-vulnerability-cve-2025-32942

Timeline

Published: Oct 2, 2025
Last modified: Oct 12, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-329434.3The vulnerability allows any authenticated user to leak the contents of arbitrary “.m3u8” files from the PeerTube server due to a path trave CVE-2025-329446.5The vulnerability allows any authenticated user to cause the PeerTube server to stop functioning in a persistent manner. If user import is CVE-2025-329454.3The vulnerability allows an existing user to add playlists to a different user’s channel using the PeerTube REST API. The vulnerable code se CVE-2025-329465.3This vulnerability allows any attacker to add playlists to a different user’s channel using the ActivityPub protocol. The vulnerable code se CVE-2025-329477.5This vulnerability allows any attacker to cause the PeerTube server to stop responding to requests due to an infinite loop in the "inbox" en CVE-2025-329487.5The vulnerability allows any attacker to cause the PeerTube server to stop functioning, or in special cases send requests to arbitrary URLs CVE-2025-329496.5This vulnerability allows any authenticated user to cause the server to consume very large amounts of disk space when extracting a Zip Bomb.CVE-2025-32954.9The WP Editor plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.2.9.1. This makes it possibl CVE-2025-329506.5Jmix is a set of libraries and tools to speed up Spring Boot data-centric application development. In versions 1.0.0 to 1.6.1 and 2.0.0 to 2 CVE-2025-329515.4Jmix is a set of libraries and tools to speed up Spring Boot data-centric application development. In versions 1.0.0 to 1.6.1 and 2.0.0 to 2 CVE-2025-329526.5Jmix is a set of libraries and tools to speed up Spring Boot data-centric application development. In versions 1.0.0 to 1.6.1 and 2.0.0 to 2 CVE-2025-329538.7z80pack is a mature emulator of multiple platforms with 8080 and Z80 CPU. In version 1.38 and prior, the `makefile-ubuntu.yml` workflow file

CVE-2025-32942: High severity, CVSS 7.2 | Vulnix