CVE-2025-32813

HIGH EXPLOITED NUCLEI

Infoblox NetMRI < 7.6.1 - Unauthenticated Command Injection in get_saml_request

Title source: nuclei
STIX 2.1

Exploitation Summary

CVE-2025-32813 has been observed exploited in the wild (reported by VulnCheck KEV). A Nuclei detection template is also available.

Description

An issue was discovered in Infoblox NETMRI before 7.6.1. Remote Unauthenticated Command Injection can occur.

Nuclei Templates (1)

Infoblox NetMRI < 7.6.1 - Unauthenticated Command Injection in get_saml_request
HIGHVERIFIEDby iamnoooob,pdresearch
FOFA: Infoblox NetMRI

References (1)

Core 1

Scores

CVSS v3 7.2
EPSS 0.4235
EPSS Percentile 98.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

VulnCheck KEV 2025-07-31
CWE
CWE-77
Status published
Products (1)
infoblox/netmri < 7.6.1
Published May 22, 2025
Tracked Since Feb 18, 2026