CVE-2025-2866

mediumpriority · track · 22EPSS 0.001 · 2 %ileDEEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.12% (2nd) EPSS

CVSS 5.5 · medium

Is it mine?

40 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-27

Improper Verification of Cryptographic Signature vulnerability in LibreOffice allows PDF Signature Spoofing by Improper Validation. In the affected versions of LibreOffice a flaw in the verification code for adbe.pkcs7.sha1 signatures could cause invalid signatures to be accepted as valid This issue affects LibreOffice: from 24.8 before < 24.8.6, from 25.2 before < 25.2.2.

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–critical · 0.4–9.8

v3.15.5mediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:Nprimary · NVD / NIST USexploitability 1.8 · impact 3.6

v3.19.8criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v4.02.4lowCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:Nsecondary · ENISA EU

v4.02.4lowCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · security@documentfoundation.org

v4.00.4lowCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-347USprimaryCWE-347US

affected products (40)

Products and version ranges known to be affected.

Debian Linuxall versionscert_bundDEcpe:/o:debian:debian_linux:-
Open Source LibreOffice <24.8.6all versionscert_bundDE
Open Source LibreOffice <25.2.2all versionscert_bundDE
Ubuntu Linuxall versionscert_bundDEcpe:/o:canonical:ubuntu_linux:-
Open Source LibreOffice< 24.8.6cert_bundDE
Open Source LibreOffice< 25.2.2cert_bundDE
The Document Foundation LibreOffice24.8 → < 24.8.6enisa_euvdEU
The Document Foundation LibreOffice25.2 → < 25.2.2enisa_euvdEU
Canonical Ltd. Ubuntu≤ 20.04 LTSfstec_bduRU
Canonical Ltd. Ubuntu≤ 22.04 LTSfstec_bduRU
Canonical Ltd. Ubuntu≤ 24.04 LTSfstec_bduRU
Canonical Ltd. Ubuntu≤ 24.10fstec_bduRU
Novell Inc. OpenSUSE Leap≤ 15.5fstec_bduRU
Novell Inc. OpenSUSE Leap≤ 15.6fstec_bduRU
Novell Inc. SUSE Linux Enterprise Server for SAP Applications≤ 15 SP6fstec_bduRU
Novell Inc. SUSE Linux Enterprise Server for SAP Applications≤ 15 SP7fstec_bduRU
Novell Inc. SUSE Linux Enterprise Server for SAP Applications≤ 15 SP5fstec_bduRU
Novell Inc. Suse Linux Enterprise Desktop≤ 15 SP5fstec_bduRU
Novell Inc. Suse Linux Enterprise Desktop≤ 15 SP6fstec_bduRU
Novell Inc. Suse Linux Enterprise Desktop≤ 15 SP7fstec_bduRU

showing 20 of 40

advisories (1)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2025-0891LibreOffice: Schwachstelle ermöglicht Umgehen von SicherheitsvorkehrungenDeutsch2025-04-27csaf · cert_bundDE
Ein lokaler Angreifer kann eine Schwachstelle in LibreOffice ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund NVD CVE.org MITRE

published 2025-04-27modified 2026-06-17

related (1,048)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-67276US	high8.1OT critical	8.94% (95th)	Exploit	2026-09-05
RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and modulus but omitting the expo…
CVE-2026-5430US	—OT critical	22.4% (98th)	KEV	2026-08-06
The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows an attacker to craft a JWT with an unsupport…
CVE-2026-48558US	—OT critical	77.7% (100th)	KEV	2026-06-12
SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is config…
CVE-2025-59719US	—OT critical	29.2% (98th)	—	2025-12-09
An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9 may allow an unauthenticate…
CVE-2025-59718US	—OT critical	68.3% (99th)	KEV	2025-12-09
A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 t…

+1043 more

references (7)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan