CVE-2025-67825

An issue was discovered in Nitro PDF Pro for Windows before 14.42.0.34. In certain cases, it displays signer information from a non-verified PDF field rather than from the verified certificate subject. This could allow a document to present inconsistent signer details. The display logic was updated to ensure signer information consistently reflects the verified certificate identity.

• CWE-346

• https://gonitro.comProduct
• https://www.gonitro.com/documentation/release-notesRelease Notes

Published

Jan 8, 2026

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-67818An issue was discovered in Weaviate OSS before 1.33.4. An at…7.2
• CVE-2025-67819An issue was discovered in Weaviate OSS before 1.33.4. Due t…4.9
• CVE-2025-6782The GoZen Forms plugin for WordPress is vulnerable to SQL In…7.5
• CVE-2025-67822A vulnerability in the Provisioning Manager component of Mit…9.4
• CVE-2025-67823A vulnerability in the Multimedia Email component of Mitel M…8.2
• CVE-2025-67824The WorklogPRO - Jira Timesheets plugin in the Jira Data Cen…6.1
• CVE-2025-67826An issue was discovered in K7 Ultimate Security 17.0.2045. A…7.7
• CVE-2025-67829Mura before 10.1.14 allows beanFeed.cfc getQuery sortDirecti…9.8
• CVE-2025-6783The GoZen Forms plugin for WordPress is vulnerable to SQL In…7.5
• CVE-2025-67830Mura before 10.1.14 allows beanFeed.cfc getQuery sortby SQL …9.8
• CVE-2025-67833Paessler PRTG Network Monitor before 25.4.114 allows XSS by …6.1
• CVE-2025-67834Paessler PRTG Network Monitor before 25.4.114 allows XSS by …5.4