← Back

CVE-2025-62820

nvd nist
Published: Oct 23, 2025Modified: Jun 17, 2026Deferred

JSON object

Loading...
4.9
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:L
Exploitability: 1.8 / Impact: 2.7
Source: MITRE (Secondary)

Description

Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network.

Related CWEs

CWE-420
Unprotected Alternate Channel
The product protects a primary channel, but it does not use the same level of protection for an alternate channel.

References (2)

Source: cve@mitre.org
Source: cve@mitre.org

Timeline

No history available yet.