Vulnerabilities

TI-2025-41496 CVE-2025-67858 · GHSA-hjvr-2r84-cx23

A crafted "interface" input parameter can lead to integrity loss of the firewall configuration

LOW 30

A Improper Neutralization of Argument Delimiters vulnerability in Foomuuri can lead to integrity loss of the firewall configuration or further unspecified impact by manipulating the JSON configuration passed to `nft`.

CVSS 4.0HIGH 7.0 Local No auth No interaction EPSS 0.00186 Published 2026-01-08 Fixed in 0.31 CWE-88

TI-2025-41355 CVE-2025-67603 · GHSA-r6jh-234r-fv5v

Lack of client authorization allows arbitrary users to influence the firewall configuration

LOW 22

A Improper Authorization vulnerability in Foomuuri llows arbitrary users to influence the firewall configuration.This issue affects Foomuuri: from ? before 0.31.

CVSS 4.0MEDIUM 5.1 Local No auth No interaction EPSS 0.00161 Published 2026-01-08 Fixed in 0.31 CWE-285

Vulnerabilities

Filters

A crafted "interface" input parameter can lead to integrity loss of the firewall configuration

Lack of client authorization allows arbitrary users to influence the firewall configuration