CVE-2025-34127Exploit

LOWCVSS 9.3 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Prioritize remediation for affected systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

A stack-based buffer overflow exists in Achat v0.150 in its default configuration. By sending a specially crafted message to the UDP port 9256, an attacker can overwrite the structured exception handler (SEH) due to insufficient bounds checking on user-supplied input leading to remote code execution.

Back to dashboard

3.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-94CWE-121

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Threat summary

Public PoC and exploit tooling are both present
1 mentions across 1 observed day

What's happening

Exploit tool or code specified in 1 signal
PoC mentioned or linked in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Exploit

1100.0%

Referenced assets1 URL

By indicator

https://zerodaysignal.com/vulnerability/CVE-2025-34127

Full discourse1 post

0day Signal@0dayPublishing186d
Exploit
🚨 CVE-2025-34127: Achat v0... SEH overwrite on UDP 9256 with public Metasploit module - ancient Achat but still deployed, trivial RCE for network recon #SEH #BufferOverflow. https://zerodaysignal.com/vulnerability/CVE-2025-34127 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The post announces CVE‑2025‑34127, highlighting that a public Metasploit module is available for a trivial RCE via SEH overwrite on UDP 9256, but does not confirm active exploitation or patch availability.
00000178
204 followersView on X

Explore more

Back to dashboard