[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2025-66016":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":10,"cwes":11,"cpes":14,"technologies":17,"references":20,"score":28,"epss_score":29,"epss_percentile":30,"is_kev":10,"cisa_kev_date_added":31,"cisa_kev_due_date":31,"cisa_ssvc":32,"attack_mappings":42,"exploits":91},83276,"CVE-2025-66016","EUVD-2025-199643","cggmp21 has a missing check in the ZK proof used in CGGMP21\n\n### Impact\ncggmp21  concerns a missing check in the ZK proof that enables an attack in which a single malicious signer can reconstruct full private key.\n\n### Patches\n* `cggmp21 v0.6.3` is a patch release that contains a fix that introduces this specific missing check\n* However, cggmp21 recommends upgrading to `cggmp24 v0.7.0-alpha.2` which contains many other security checks as a precaution. Follow [migration guideline](https:\u002F\u002Fgithub.com\u002FLFDT-Lockness\u002Fcggmp21\u002Fblob\u002Fv0.7.0-alpha.2\u002FCGGMP21_MIGRATION.md) to upgrade.\n\n### Workarounds\nUpdate to `cggmp21 v0.6.3`, a minor release that contains a minimal security patch.\n\nHowever, for full mitigation, users will need to upgrade to `cggmp24 v0.7.0-alpha.2` as it contains many more security check implementations.\n\n### Resources\nRead this [blog post](https:\u002F\u002Fwww.dfns.co\u002Farticle\u002Fcggmp21-vulnerabilities-patched-and-explained) to learn more.","2025-11-25T20:41:00Z",{},false,[12,13],"CWE-345","CWE-347",[15,16],"cpe:2.3:a:cggmp24:cggmp24:*:*:*:*:*:*:*:*","cpe:2.3:a:cggmp21:cggmp21:*:*:*:*:*:*:*:*",[18,19],"Cggmp21 Cggmp21","Cggmp24 Cggmp24",[21,22,23,24,25,26,27],"https:\u002F\u002Fgithub.com\u002FLFDT-Lockness\u002Fcggmp21\u002Fsecurity\u002Fadvisories\u002FGHSA-m95p-425x-x889","https:\u002F\u002Fwww.dfns.co\u002Farticle\u002Fcggmp21-vulnerabilities-patched-and-explained","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66016","https:\u002F\u002Fgithub.com\u002FLFDT-Lockness\u002Fcggmp21\u002Fcommit\u002F60e0ada5291e771d5649793329d99edd32285e72","https:\u002F\u002Fgithub.com\u002FLFDT-Lockness\u002Fcggmp21","https:\u002F\u002Frustsec.org\u002Fadvisories\u002FRUSTSEC-2025-0129.html","https:\u002F\u002Frustsec.org\u002Fadvisories\u002FRUSTSEC-2025-0130.html",0,0.00186,0.08126,null,{"timestamp":33,"automatable":34,"tech_impact":35,"exploitation":36,"cisa_decision":37,"cisa_remediation_timeline":41},"2025-11-25T20:52:37.881136Z","yes","total","none",{"vector":38,"decision":39,"priority":40},"CISAv1\u002FE:N\u002FA:Y\u002FT:T\u002FM:H\u002F2026-10-25T16:14:19.393320\u002F","attend","medium","3D",[43,52,60,67,75,83],{"name":44,"source":45,"cwe_ids":46,"tactics":47,"capec_ids":49,"technique_id":51},"Exploitation for Stealth","capec",[12],[48],"stealth",[50],"CAPEC-665","T1211",{"name":53,"source":45,"cwe_ids":54,"tactics":55,"capec_ids":57,"technique_id":59},"Defacement",[12],[56],"impact",[58],"CAPEC-148","T1491",{"name":61,"source":45,"cwe_ids":62,"tactics":63,"capec_ids":65,"technique_id":66},"Component Firmware",[12],[64,48],"persistence",[50],"T1542.002",{"name":68,"source":45,"cwe_ids":69,"tactics":70,"capec_ids":73,"technique_id":74},"Modify Authentication Process",[12],[71,72,64],"credential-access","defense-impairment",[50],"T1556",{"name":76,"source":45,"cwe_ids":77,"tactics":78,"capec_ids":80,"technique_id":82},"ARP Cache Poisoning",[12],[79,71],"collection",[81],"CAPEC-141","T1557.002",{"name":84,"source":45,"cwe_ids":85,"tactics":86,"capec_ids":88,"technique_id":90},"DNS Server",[12],[87],"resource-development",[89],"CAPEC-142","T1584.002",[]]