Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-rp48-23m3-h3bx
Vulnerability ID VCID-rp48-23m3-h3bx
Aliases CVE-2025-32728
Summary
Status Published
Exploitability 0.5
Weighted Severity 3.9
Risk 1.9
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-440 Expected Behavior Violation
System Score Found at
cvssv3 4.3 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-32728.json
epss 0.0022 https://api.first.org/data/v1/epss?cve=CVE-2025-32728
epss 0.0022 https://api.first.org/data/v1/epss?cve=CVE-2025-32728
epss 0.0022 https://api.first.org/data/v1/epss?cve=CVE-2025-32728
epss 0.0022 https://api.first.org/data/v1/epss?cve=CVE-2025-32728
cvssv3.1 4.3 https://ftp.openbsd.org/pub/OpenBSD/patches/7.6/common/013_ssh.patch.sig
ssvc Track https://ftp.openbsd.org/pub/OpenBSD/patches/7.6/common/013_ssh.patch.sig
cvssv3.1 4.3 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1 4.3 https://github.com/openssh/openssh-portable/commit/fc86875e6acb36401dfc1dfb6b628a9d1460f367
ssvc Track https://github.com/openssh/openssh-portable/commit/fc86875e6acb36401dfc1dfb6b628a9d1460f367
cvssv3.1 4.3 https://lists.mindrot.org/pipermail/openssh-unix-dev/2025-April/041879.html
ssvc Track https://lists.mindrot.org/pipermail/openssh-unix-dev/2025-April/041879.html
cvssv3.1 4.3 https://www.openssh.com/txt/release-10.0
ssvc Track https://www.openssh.com/txt/release-10.0
cvssv3.1 4.3 https://www.openssh.com/txt/release-7.4
ssvc Track https://www.openssh.com/txt/release-7.4
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-32728.json
https://api.first.org/data/v1/epss?cve=CVE-2025-32728
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32728
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
013_ssh.patch.sig https://ftp.openbsd.org/pub/OpenBSD/patches/7.6/common/013_ssh.patch.sig
041879.html https://lists.mindrot.org/pipermail/openssh-unix-dev/2025-April/041879.html
1102603 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1102603
2358767 https://bugzilla.redhat.com/show_bug.cgi?id=2358767
fc86875e6acb36401dfc1dfb6b628a9d1460f367 https://github.com/openssh/openssh-portable/commit/fc86875e6acb36401dfc1dfb6b628a9d1460f367
release-10.0 https://www.openssh.com/txt/release-10.0
release-7.4 https://www.openssh.com/txt/release-7.4
RHSA-2025:20126 https://access.redhat.com/errata/RHSA-2025:20126
USN-7457-1 https://usn.ubuntu.com/7457-1/
No exploits are available.
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-32728.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N Found at https://ftp.openbsd.org/pub/OpenBSD/patches/7.6/common/013_ssh.patch.sig
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-10T18:35:34Z/ Found at https://ftp.openbsd.org/pub/OpenBSD/patches/7.6/common/013_ssh.patch.sig
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N Found at https://github.com/openssh/openssh-portable/commit/fc86875e6acb36401dfc1dfb6b628a9d1460f367
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-10T18:35:34Z/ Found at https://github.com/openssh/openssh-portable/commit/fc86875e6acb36401dfc1dfb6b628a9d1460f367
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N Found at https://lists.mindrot.org/pipermail/openssh-unix-dev/2025-April/041879.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-10T18:35:34Z/ Found at https://lists.mindrot.org/pipermail/openssh-unix-dev/2025-April/041879.html
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N Found at https://www.openssh.com/txt/release-10.0
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-10T18:35:34Z/ Found at https://www.openssh.com/txt/release-10.0
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N Found at https://www.openssh.com/txt/release-7.4
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-10T18:35:34Z/ Found at https://www.openssh.com/txt/release-7.4
Exploit Prediction Scoring System (EPSS)
Percentile 0.44714
EPSS Score 0.0022
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-10T18:12:45.734511+00:00 SUSE Severity Score Importer Import https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml 38.6.0