CVE-2025-32814

CRITICAL EXPLOITED NUCLEI

NetMRI Unauthenticated SQL Injection via skipjackUsername

Title source: nuclei
STIX 2.1

Exploitation Summary

CVE-2025-32814 has been observed exploited in the wild (reported by VulnCheck KEV). A Nuclei detection template is also available.

Description

An issue was discovered in Infoblox NETMRI before 7.6.1. Unauthenticated SQL Injection can occur.

Nuclei Templates (1)

NetMRI Unauthenticated SQL Injection via skipjackUsername
CRITICALVERIFIEDby iamnoooob,pdresearch
FOFA: icon_hash="-319724102"

References (1)

Core 1

Scores

CVSS v3 9.8
EPSS 0.3473
EPSS Percentile 98.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

VulnCheck KEV 2025-07-22
CWE
CWE-89
Status published
Products (1)
infoblox/netmri < 7.6.1
Published May 22, 2025
Tracked Since Feb 18, 2026