CVE-2025-32355Exploit(rocketsoftware / trufusion_enterprise)

LOWCVSS 7.9 · HIGH

Exploit discussion active in current signal (2 latest mentions)

Immediate actions

Prioritize remediation for rocketsoftware trufusion_enterprise systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

Rocket TRUfusion Enterprise through 7.10.4.0 uses a reverse proxy to handle incoming connections. However, the proxy is misconfigured in a way that allows specifying absolute URLs in the HTTP request line, causing the proxy to load the given resource.

rocketsoftware CVEs Back to dashboard

3.5/ 10 priority

Sources & remediation

Exploit / PoC references

https://www.rcesecurity.com/advisories/cve-2025-32355/

Other references

Weakness type (CWE)

CWE-918

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

trufusion_enterprise

Threat summary

Public PoC and exploit tooling are both present
7 mentions across 3 observed days
Momentum state: stable

What's happening

Exploit tool or code specified in 1 signal
PoC mentioned or linked in 2 signals
Technical details provided in 5 signals
General: 2 classified signals
Disclosure: 1 classified signal
Peaked 2d ago at 3 mentions (2026-02-17); latest day: 2
7 total mentions across 3 days

Affected systems

Vendors

rocketsoftware

Products

trufusion_enterprise

Deep dive

Activity timeline7 mentions / 3d

Signal classification4 categories

Exploit

342.9%

General

228.6%

Disclosure

114.3%

PoC

114.3%

Referenced assets8 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-17	3	Exploit3
2026-02-18	2	Disclosure1PoC1
2026-03-23	2	General2

Full discourse7 posts

Julien | MrTuxracer 🇪🇺@MrTuxracer234d
Exploit
Pwning TRUfusion Enterprise again: chaining a pre-auth SSRF (CVE-2025-32355), a default password, and a path traversal (CVE-2025-59793) to gain RCE. #security https://www.rcesecurity.com/2026/02/when-audits-fail-from-pre-auth-ssrf-to-rce-in-trufusion-enterprise/
Post summary
The post outlines an exploitation chain—pre‑auth SSRF, default password, and path traversal—to achieve remote code execution in TRUfusion Enterprise.
212068345.1K
38.4K followersView on X
RCE Security@rcesecurity234d
Exploit
Pwning TRUfusion Enterprise again: chaining a pre-auth SSRF (CVE-2025-32355), a default password, and a path traversal (CVE-2025-59793) to gain RCE. #security https://www.rcesecurity.com/2026/02/when-audits-fail-from-pre-auth-ssrf-to-rce-in-trufusion-enterprise/
Post summary
The post describes how chaining a pre‑auth SSRF, default password, and path traversal vulnerabilities in TRUfusion Enterprise results in remote code execution.
011039192.7K
237 followersView on X
Mr. OS@ksg93rd234d
Exploit
#exploit #AppSec 1⃣. CVE-2026-25506: Pwning Supercomputers - A 20yo vulnerability in Munge https://blog.lexfo.fr/munge-heap-buffer-overflow.html // Exploitation involved heap spraying, tcache poisoning, and crafting fake chunks to leak internal addresses and ultimately retrieve the Munge secret key 2⃣. ClickOnce + AppDomainManager Injection + ProxyBlob SOCKS5 -> Initial Access https://github.com/dazzyddos/ClickOnceBlobber // It automates the process of patching, compiling, and manifest updating, allowing attackers to embed malicious DLLs into legitimate, signed ClickOnce apps without breaking their signatures or raising suspicion 3⃣. CVE-2025-59793: From Pre-Auth SSRF to RCE in TRUfusion Enterprise https://www.rcesecurity.com/2026/02/when-audits-fail-from-pre-auth-ssrf-to-rce-in-trufusion-enterprise // Exploit chains the path traversal with the previously described SSRF (CVE-2025-32355)
Post summary
The post outlines PoC code and tool availability for CVE‑2026‑25506, CVE‑2025‑59793, and a ClickOnce exploitation chain, emphasizing the practical exploitation methods rather than remediation or in‑the‑wild activity.
10031396
3.1K followersView on X
pdnuclei-bot@pdnuclei_bot232d
PoC
🚨 CVE-2025-32355 - high 🚨 Rocket TRUfusion Enterprise - Server Side Request Forgery > Rocket TRUfusion Enterprise through 7.10.4.0 uses a reverse proxy to handle incoming ... 👾 https://cloud.projectdiscovery.io/library/CVE-2025-32355 @pdnuclei #NucleiTemplates #cve
Post summary
The tweet announces a high‑severity SSRF vulnerability (CVE‑2025‑32355) in Rocket TRUfusion Enterprise and references a library entry that likely contains PoC code, but provides no details on active exploitation, patches, or deep technical specifics.
00011175
887 followersView on X
Infoflowcloud@infoflowcloud200d
General
🚨*CVE* CVE-2025-32355 Rocket TRUfusion Enterprise through 7.10.4.0 uses a reverse proxy to handle incoming connections. However, the proxy is misconfigured in a way that allows specifying … https://www.cve.org/CVERecord?id=CVE-2025-32355 ----- Traducción: CVE-2025-32355 Roc… http://infoflow.cloud`
Post summary
The brief post references CVE‑2025‑32355, noting a misconfigured reverse proxy in Rocket TRUfusion Enterprise, but provides no detailed technical data, PoC, or evidence of exploitation.
0000046
61 followersView on X
CVE@CVEnew200d
General
CVE-2025-32355 Rocket TRUfusion Enterprise through 7.10.4.0 uses a reverse proxy to handle incoming connections. However, the proxy is misconfigured in a way that allows specifying … https://www.cve.org/CVERecord?id=CVE-2025-32355
Post summary
The post references CVE-2025-32355, noting a misconfiguration in the reverse proxy of Rocket TRUfusion Enterprise but offers no further details or actionable information.
00000230
56.8K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds233d
Disclosure
CVE-2025-32355 Rocket TRUfusion Enterprise Reverse Proxy URL Injection Vulnerability https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-32355
Post summary
The text announces CVE-2025-32355 as a URL injection vulnerability in Rocket TRUfusion Enterprise Reverse Proxy, providing basic vulnerability details but no evidence of PoC, exploit code, active exploitation, or patch.
0000048
4.0K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	rocketsoftware	trufusion_enterprise	-	-	-

Explore more

Back to dashboard rocketsoftware CVEs trufusion_enterprise vulnerabilities

What researchers are saying

CVE-2025-32355

Julien | MrTuxracer 🇪🇺@MrTuxracerExploit

The post outlines an exploitation chain—pre‑auth SSRF, default password, and path traversal—to achieve remote code execution in TRUfusion Enterprise.

RCE Security@rcesecurityExploit

The post describes how chaining a pre‑auth SSRF, default password, and path traversal vulnerabilities in TRUfusion Enterprise results in remote code execution.

Mr. OS@ksg93rdExploit

The post outlines PoC code and tool availability for CVE‑2026‑25506, CVE‑2025‑59793, and a ClickOnce exploitation chain, emphasizing the practical exploitation methods rather than remediation or in‑the‑wild activity.

pdnuclei-bot@pdnuclei_botPoC

The tweet announces a high‑severity SSRF vulnerability (CVE‑2025‑32355) in Rocket TRUfusion Enterprise and references a library entry that likely contains PoC code, but provides no details on active exploitation, patches, or deep technical specifics.

Infoflowcloud@infoflowcloudGeneral

The brief post references CVE‑2025‑32355, noting a misconfigured reverse proxy in Rocket TRUfusion Enterprise, but provides no detailed technical data, PoC, or evidence of exploitation.

CVE@CVEnewGeneral

The post references CVE-2025-32355, noting a misconfiguration in the reverse proxy of Rocket TRUfusion Enterprise but offers no further details or actionable information.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The text announces CVE-2025-32355 as a URL injection vulnerability in Rocket TRUfusion Enterprise Reverse Proxy, providing basic vulnerability details but no evidence of PoC, exploit code, active exploitation, or patch.