CVE-2025-23386: Suse Opensuse Tumbleweed

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed package gerbera allows the service user gerbera to escalate to root.,This issue affects gerbera on openSUSE Tumbleweed before 2.5.0-1.1.

Affected products

• Suse Opensuse Tumbleweed

Published 2025-04-10. Last modified 2026-06-17.