NVD disclosure day

Published threat advisories for December 23, 2025

CVE advisoryCRITICAL

CVE-2025-67109

Eclipse Cyclone DDS Certificate Check Bypass Executes Commands as System.

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A vulnerability in Eclipse Cyclone DDS allows attackers to bypass certificate checks, potentially leading to command execution with system privileges. This affects systems relying on this middleware for secure communication, particularly if exposed to external networks, and could impact data integrity and unauthorized

NVD published:

CVE advisoryCRITICAL

CVE-2025-67108

eProsima Fast-DDS Ticket Revocation Vulnerability.

Halo Surface Signal: 2 out of 5 — less likely to be public-facing.

eProsima Fast-DDS, a communications middleware, has a critical vulnerability due to improper ticket revocation validation, which can lead to insecure communications. If reachable, this could allow unauthorized access and modification of exchanged data. Confirming the relevance and exposure of Fast-DDS deployments is cr

NVD published: