CVE-2026-25825

{"id": "CVE-2026-25825", "cveTags": [], "metrics": {}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2026-09-15T15:17:14.347", "references": [{"url": "https://keyfactor.com", "source": "cve@mitre.org"}, {"url": "https://support.keyfactor.com/hc/en-us/articles/46345022297499-SignServer-CVE-2026-25825-Arbitrary-File-Write", "source": "cve@mitre.org"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "An issue was discovered in Keyfactor SignServer before 7.6.0. The output file to which SignerStatusReportWorker logs the report can be set to any path, even one that points to a file that already exists. This gives a user (with admin access) the possibility to write files in arbitrary directories in the server filesystem and potentially overwrite files accessible by the local user JBoss."}], "lastModified": "2026-09-15T15:17:14.347", "sourceIdentifier": "cve@mitre.org"}