First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-67841

HighCVSS 7.5/10Last modified Nov 4, 2026

Description

Nordic Semiconductor IronSide SE for nRF54H20 before 23.0.2+17 has an Algorithmic complexity issue.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: Apr 15, 2026
Last modified: Nov 4, 2026
NVD status: Awaiting Analysis

Related CVEs from 2025

CVE-2025-678425.4The Static Asset API in Mintlify Platform before 2025-11-15 allows remote attackers to inject arbitrary web script or HTML via the subdomain CVE-2025-678439.8A Server-Side Template Injection (SSTI) vulnerability in the MDX Rendering Engine in Mintlify Platform before 2025-11-15 allows remote attac CVE-2025-678444.3The GitHub Integration API in Mintlify Platform before 2025-11-15 allows remote attackers to obtain sensitive repository metadata via the re CVE-2025-678455.4A Directory Traversal vulnerability in the Static Asset Proxy Endpoint in Mintlify Platform before 2025-11-15 allows remote attackers to inj CVE-2025-678466.5The Deployment Infrastructure in Mintlify Platform before 2025-11-15 allows remote attackers to bypass security patches and execute downgrad CVE-2025-678478.8A flaw was found in Moodle. An attacker with access to the restore interface could trigger server-side execution of arbitrary code. This is CVE-2025-678488.1A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Inter CVE-2025-678496.1A flaw was found in Moodle. This cross-site scripting (XSS) vulnerability, caused by improper sanitization of AI prompt responses, allows at CVE-2025-67854.7Securing externally available CAN wires can easily allow physical access to the CAN bus, allowing possible injection of specially formed CAN CVE-2025-678506.1A flaw was found in moodle. This vulnerability, known as Cross-Site Scripting (XSS), occurs due to insufficient checks on user-provided data CVE-2025-678517.8A flaw was found in moodle. This formula injection vulnerability occurs when data fields are exported without proper escaping. A remote atta CVE-2025-678526.1A flaw was found in Moodle. An open redirect vulnerability in the OAuth login flow allows a remote attacker to redirect users to attacker-co

CVE-2025-67841: High severity, CVSS 7.5 | Vulnix