CVE-2025-32355: Rocketsoftware Trufusion Enterprise

High severity, CVSS 7.3. EPSS: 1.3% chance of exploitation in the next 30 days.

Rocket TRUfusion Enterprise through 7.10.4.0 uses a reverse proxy to handle incoming connections. However, the proxy is misconfigured in a way that allows specifying absolute URLs in the HTTP request line, causing the proxy to load the given resource.

Affected products

• Rocketsoftware Trufusion Enterprise: before 7.10.5.0 (fixed in 7.10.5.0)

Published 2026-02-17. Last modified 2026-06-17.