CVE-2025-6182

8.5 highEPSS 0.08%

High (8.5). EPSS 0.08% chance of exploitation in the next 30 days.

The StrongDM Windows service incorrectly handled communication related to system certificate management. Attackers could exploit this behavior to install untrusted root certificates or remove trusted ones.

Severity

CVSS 4.0

8.5 high

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

EPSS: 0.08% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-10-31)
CWE: CWE-269
Published: 2025-08-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://security.strongdm.com/?tcuUid=56fde839-9388-4361-8d3b-9baa7b2de2ed

Check your stack JSON