CVE-2025-65882

Critical · CVSS 9.8

openmptcprouter — OS Command Injection / Arbitrary File Write (CWE-78)

CVSS: 9.8; nvd
EPSS: —
KEV: No
Class: oss containerizable; CWE-78

Description

An issue was discovered in openmptcprouter thru 0.64 in file common/package/utils/sys-upgrade-helper/src/tools/sysupgrade.c in function create_xor_ipad_opad allowing attackers to potentially write arbitrary files or execute arbitrary commands.

Search profile — drives PoC discovery

Symbols create_xor_ipad_opadsysupgrade.csys-upgrade-helpersysupgrade

Keywords CVE-2025-65882openmptcproutercreate_xor_ipad_opadsysupgrade.csys-upgrade-helperarbitrary command executionarbitrary file writeCWE-78openmptcprouter PoCopenmptcprouter exploit

Versions: 0.0 - 0.64

References

https://gist.github.com/AradCohen/939ee50d60c4d2bd555a364615a5ab9c
https://github.com/Ysurac/openmptcprouter/commit/09393d1c41a227bea7d5b85c0a06221b1302b25f

Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-06T06:30:39.000Z