CVE-2026-25825
Low
Description
An issue was discovered in Keyfactor SignServer before 7.6.0. The output file to which SignerStatusReportWorker logs the report can be set to any path, even one that points to a file that already exists. This gives a user (with admin access) the possibility to write files in arbitrary directories in the server filesystem and potentially overwrite files accessible by the local user JBoss.
SeverityLow
CVSS2.7
Exploit probability—
ProductSignServer
PublishedSep 15, 2026
First seenSep 15, 2026
Weakness typeCWE-706CWE-706
How to fix
Update
- Keyfactor SignServer7.6.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Keyfactor SignServer | No range specified | 7.6.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.