Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Vulnerability that allows a Padding Oracle Attack to be performed on the Funambol v30.0.0.20 cloud server. The thumbnail display URL allows an attacker to decrypt and encrypt the parameters used by the application to generate ‘self-signed’ access URLs.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
⚠️#INCIBEaviso | Cifrado débil en el servidor en la nube de Funambol #CVE CVE-2025-41351 https://www.incibe.es/incibe-cert/alerta-temprana/avisos/cifrado-debil-en-el-servidor-en-la-nube-de-funambol #AvisosDeSeguridad #TI #CNA #0day https://t.co/ujfL4SkSJN
Post summary
INCIBE alerts about CVE-2025-41351, noting weak encryption on Funambol's cloud server, but does not provide PoC, exploitation details, or patch information.
CVE-2025-41351 Vulnerability that allows a Padding Oracle Attack to be performed on the Funambol v30.0.0.20 cloud server. The thumbnail display URL allows an attacker to decrypt and… https://www.cve.org/CVERecord?id=CVE-2025-41351
Post summary
A padding oracle vulnerability (CVE-2025-41351) in Funambol v30.0.0.20 cloud servers is disclosed, enabling attackers to decrypt data via the thumbnail URL.