CVE-2025-32874

An issue was discovered in Kaseya Rapid Fire Tools Network Detective through 2.0.16.0. A vulnerability exists in the EncryptionUtil class because symmetric encryption is implemented in a deterministic and non-randomized fashion. The method Encrypt(byte[] clearData) derives both the encryption key and the IV from a fixed, hardcoded input by using a static salt value. As a result, identical plaintext inputs always produce identical ciphertext outputs. This is true for both FIPS and non-FIPS generated passwords. In other words, there is a cryptographic implementation flaw in the password encryption mechanism. Although there are multiple encryption methods grouped under FIPS and non-FIPS classifications, the logic consistently results in predictable and reversible encrypted outputs due to the lack of per-operation randomness and encryption authentication.

• CWE-326

• https://codykretsinger.com
• https://galacticadvisors.com
• https://www.galacticadvisors.com/release/critical-vulnerabilities-in-network-detective/
• https://www.galacticadvisors.com/release/cve/

Published

Jul 16, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-32869A vulnerability has been identified in TeleControl Server Ba…8.8
• CVE-2025-3287A local code execution vulnerability exists in the Rockwell …7.8
• CVE-2025-32870A vulnerability has been identified in TeleControl Server Ba…8.8
• CVE-2025-32871A vulnerability has been identified in TeleControl Server Ba…8.8
• CVE-2025-32872A vulnerability has been identified in TeleControl Server Ba…8.8
• CVE-2025-32873An issue was discovered in Django 4.2 before 4.2.21, 5.1 bef…5.3
• CVE-2025-32875An issue was discovered in the COROS application through 3.8…5.7
• CVE-2025-32876An issue was discovered on COROS PACE 3 devices through 3.08…6.8
• CVE-2025-32877An issue was discovered on COROS PACE 3 devices through 3.08…9.8
• CVE-2025-32878An issue was discovered on COROS PACE 3 devices through 3.08…9.8
• CVE-2025-32879An issue was discovered on COROS PACE 3 devices through 3.08…8.8
• CVE-2025-3288A local code execution vulnerability exists in the Rockwell …7.8