CVE-2025-69806 Information disclosure in n/a

High 7.5 Published Updated

Unauthenticated remote attackers can leak relative information via out-of-bounds read in bareiron server packets.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
Not needed
Fix
None listed

What is CVE-2025-69806?

CVE-2025-69806 is a high-severity vulnerability in n/a, published on 12 Feb 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

p2r3 bareiron commit: 8e4d4020d contains an Out-of-bounds Read, which allows unauthenticated remote attackers to get relative information leakage via a packet sent to the server

Weakness: CWE-125

Which versions are affected by CVE-2025-69806?

It affects 1 product.

Products include P2r3 Bareiron.

How do I fix CVE-2025-69806?

No fix has been published for CVE-2025-69806 yet. Limit exposure of the affected software until one is available.

Is CVE-2025-69806 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-69806 exists.

Sources

Also known as GHSA-ghfm-hghj-9j75.

Is CVE-2025-69806 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free