First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-45480

LowCVSS 3.0/10Last modified Oct 14, 2026

Description

Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary.

Metrics

CVSS 3.1 3.0/10CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
projectfloodlight	Floodlight	71fe8a7e72096eb0fd96c1d814a04e3b7b782830

References

https://github.com/floodlight/floodlight/issues/873

Timeline

Published: Sep 13, 2026
Last modified: Oct 14, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-454879.8Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.InternetConnection function.CVE-2025-454889.8Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the mailex CVE-2025-454899.8Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the hostna CVE-2025-45499.8A vulnerability classified as critical was found in Campcodes Online Food Ordering System 1.0. This vulnerability affects unknown code of th CVE-2025-454909.8Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the passwo CVE-2025-454919.8Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the userna CVE-2025-454929.8Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the Iface parameter in the action_wireless function.CVE-2025-454936.5Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the iface parameter in the action_bandwidth function.CVE-2025-45509.8A vulnerability, which was classified as critical, has been found in PHPGurukul Apartment Visitors Management System 1.0. This issue affects CVE-2025-45515.4A vulnerability, which was classified as problematic, was found in ContiNew Admin up to 3.6.0. Affected is an unknown function of the file /CVE-2025-455126.5A lack of signature verification in the bootloader of DENX Software Engineering Das U-Boot (U-Boot) v1.1.3 allows attackers to install craft CVE-2025-455139.8Tenda FH451 V1.0.0.9 has a stack overflow vulnerability in the function.P2pListFilter.

CVE-2025-45480: Low severity, CVSS 3.0 | Vulnix