CVE-2025-6182: Strongdm Sdm

High severity, CVSS 8.5. EPSS: 0.1% chance of exploitation in the next 30 days.

The StrongDM Windows service incorrectly handled communication related to system certificate management. Attackers could exploit this behavior to install untrusted root certificates or remove trusted ones.

Affected products

• Strongdm Sdm: up to and including 47.49.0

Published 2025-08-20. Last modified 2026-06-17.