CVE-2025-42959 | BDVDB-2026-285307 Detail

Description#

An unauthenticated attacker may exploit a scenario where a Hashed Message Authentication Code (HMAC) credential, extracted from a system missing specific security patches, is reused in a replay attack against a different system. Even if the target system is fully patched, successful exploitation could result in complete system compromise, affecting confidentiality, integrity, and availability.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12025-07-08Record published in the CVE List.
2. Version 22026-02-26Most recent update recorded in the CVE List.