Critical Net-SNMP Vulnerability (CVE-2025-68615) Enables RCE and DoS Attacks On December 24, 2025, a critical vulnerability (CVE-2025-68615) was disclosed in Net-SNMP, a widely used open-source suite for network monitoring and management. The flaw, rated 9.8 on the CVSS scale, affects the snmptrapd daemon, which processes SNMP trap messages from network devices. Discovered by security researcher buddurid in collaboration with the Trend Micro Zero Day Initiative (ZDI), the vulnerability stems from a buffer overflow triggered by a specially crafted packet. While the advisory confirms the flaw can crash the daemon—resulting in a denial-of-service (DoS)—its high severity suggests potential for remote code execution (RCE) if exploited by skilled attackers. Net-SNMP is a foundational tool for monitoring servers, routers, and switches, supporting SNMP v1, v2c, v3, AgentX, IPv4, IPv6, and Unix sockets. The vulnerability specifically impacts snmptrapd, which listens on UDP port 162 by default. If exposed to the internet, the service becomes a global attack vector. Patches are available in Net-SNMP 5.9.5 and 5.10.pre2. The advisory warns that no mitigations exist beyond firewalling the service, recommending administrators restrict access to trusted internal IPs only. Organizations relying on Net-SNMP for network management are urged to apply updates immediately to prevent exploitation.