CVE-2025-25568

Summary

CVE-2025-25568 is a newly disclosed vulnerability that affects SoftEtherVPN version 5.02.5187. The issue lies in the Command.c file, specifically in the CheckNetworkAcceptThread function. This vulnerability results in a Use after Free condition, which allows attackers to execute arbitrary code or cause a denial-of-service (DoS) attack by manipulating this component. Successful exploitation may lead to significant security implications for vulnerable systems, including unauthorized access and data breaches. Users are advised to update their VPN software to a patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.