What’s Vulnerable › Vulnerabilities

CVE-2025-52936: Improper Link Resolution Before File Access vulnerability in yrutschle/sslh

• Severity: critical (CVSS 9.3 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-06-23 · updated 2026-08-01
• Weakness: CWE-59

Description

Improper Link Resolution Before File Access ('Link Following') vulnerability in yrutschle sslh.This issue affects sslh: before 2.2.2.

References

• https://github.com/yrutschle/sslh/pull/494
• https://lists.debian.org/debian-lts-announce/2025/07/msg00001.html
• https://lists.debian.org/debian-lts-announce/2026/08/msg00004.html

Get alerted when CVE-2025-52936 or the next vulnerability affects your stack