Vulnerability · Published Sep 13, 2026 · Assigned by mitre
CVE-2025-45480
Low 3.0
In plain English
A low-severity security flaw in Floodlight from projectfloodlight. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities).
Severity (CVSS 3.1)3.0Low
Exploit odds (30 days)0.2%top 92.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| projectfloodlight | Floodlight | 71fe8a7e72096eb0fd96c1d814a04e3b7b782830 |
Weakness: CWE-669 · Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N