top of page
Cyber Security, Compliance & Business Continuity Update
There's always something on the horizon with business continuity and cyber security: regulations change, new expectations arise and industry intelligence continues to develop. On this page we maintain a curated list of developments and issues that could affect the information security and business continuity arrangements of SME organisations
Last Update: August 2026
CVE ID | Vendor | Product | Vulnerability Name | Date Added | Short Description | Likely Attack Vector |
|---|---|---|---|---|---|---|
CVE-2025-32463 | Sudo | Sudo | Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability | 29 September 2025 | Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to leverage sudo’s -R (--chroot) option to run arbitrary commands as root even if they are not listed in the sudoers file. | Application/System Exploitation |
CVE-2025-59689 | Libraesva | Email Security Gateway | Libraesva Email Security Gateway Command Injection Vulnerability | 29 September 2025 | Libraesva Email Security Gateway (ESG) contains a command injection vulnerability which allows command injection via a compressed e-mail attachment. | Perimeter Gateway Breach |
CVE-2025-10035 | Fortra | GoAnywhere MFT | Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability | 29 September 2025 | Fortra GoAnywhere MFT contains a deserialization of untrusted data vulnerability allows an actor with a validly forged license response signature to deserialize an arbitrary actor-controlled object possibly leading to command injection. | Application/System Exploitation |
CVE-2025-20352 | Cisco | IOS and IOS XE | Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability | 29 September 2025 | Cisco IOS and IOS XE contains a stack-based buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) subsystem that could allow for denial of service or remote code execution. A successful exploit could allow a low-privileged attacker to cause the affected system to reload resulting in a DoS condition or allow a high-privileged attacker to execute arbitrary code as the root user and obtain full control of the affected system. | Direct Remote Network Attack |
CVE-2021-21311 | Adminer | Adminer | Adminer Server-Side Request Forgery Vulnerability | 29 September 2025 | Adminer contains a server-side request forgery vulnerability that when exploited allows a remote attacker to obtain potentially sensitive information. | Application/System Exploitation |
CVE-2025-20362 | Cisco | Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability | 25 September 2025 | Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a missing authorization vulnerability. This vulnerability could be chained with CVE-2025-20333. | Perimeter Gateway Breach |
CVE-2025-20333 | Cisco | Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability | 25 September 2025 | Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a buffer overflow vulnerability that allows for remote code execution. This vulnerability could be chained with CVE-2025-20362. | Perimeter Gateway Breach |
CVE-2025-10585 | Google | Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 23 September 2025 | Google Chromium contains a type confusion vulnerability in the V8 JavaScript and WebAssembly engine. | Phishing / User Interaction |
CVE-2025-5086 | Dassault Systèmes | DELMIA Apriso | Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability | 11 September 2025 | Dassault Systèmes DELMIA Apriso contains a deserialization of untrusted data vulnerability that could lead to a remote code execution. | Direct Remote Network Attack |
CVE-2025-38352 | Linux | Kernel | Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability | 04 September 2025 | Linux kernel contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that has a high impact on confidentiality integrity and availability. | Application/System Exploitation |
CVE-2025-48543 | Android | Runtime | Android Runtime Use-After-Free Vulnerability | 04 September 2025 | Android Runtime contains a use-after-free vulnerability potentially allowing a chrome sandbox escape leading to local privilege escalation. | Application/System Exploitation |
CVE-2025-53690 | Sitecore | Multiple Products | Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability | 04 September 2025 | Sitecore Experience Manager (XM) Experience Platform (XP) Experience Commerce (XC) and Managed Cloud contain a deserialization of untrusted data vulnerability involving the use of default machine keys. This flaw allows attackers to exploit exposed ASP.NET machine keys to achieve remote code execution. | Direct Remote Network Attack |
CVE-2023-50224 | TP-Link | TL-WR841N | TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability | 03 September 2025 | TP-Link TL-WR841N contains an authentication bypass by spoofing vulnerability within the httpd service which listens on TCP port 80 by default leading to the disclose of stored credentials. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. | Application/System Exploitation |
CVE-2025-9377 | TP-Link | Multiple Routers | TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability | 03 September 2025 | TP-Link Archer C7(EU) and TL-WR841N/ND(MS) contain an OS command injection vulnerability that exists in the Parental Control page. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. | Application/System Exploitation |
CVE-2020-24363 | TP-Link | TL-WA855RE | TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability | 02 September 2025 | TP-link TL-WA855RE contains a missing authentication for critical function vulnerability. This vulnerability could allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by setting a new administrative password. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. | Direct Remote Network Attack |
CVE-2025-55177 | Meta Platforms | WhatsApp | Meta Platforms WhatsApp Incorrect Authorization Vulnerability | 02 September 2025 | Meta Platforms WhatsApp contains an incorrect authorization vulnerability due to an incomplete authorization of linked device synchronization messages. This vulnerability could allow an unrelated user to trigger processing of content from an arbitrary URL on a target’s device. | Application/System Exploitation |
CVE-2025-57819 | Sangoma | FreePBX | Sangoma FreePBX Authentication Bypass Vulnerability | 29 August 2025 | Sangoma FreePBX contains an authentication bypass vulnerability due to insufficiently sanitized user-supplied data allows unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution. | Direct Remote Network Attack |
CVE-2025-7775 | Citrix | NetScaler | Citrix NetScaler Memory Overflow Vulnerability | 26 August 2025 | Citrix NetScaler ADC and NetScaler Gateway contain a memory overflow vulnerability that could allow for remote code execution and/or denial of service. | Perimeter Gateway Breach |
CVE-2025-48384 | Git | Git | Git Link Following Vulnerability | 25 August 2025 | Git contains a link following vulnerability that stems from Git’s inconsistent handling of carriage return characters in configuration files. | Application/System Exploitation |
CVE-2024-8068 | Citrix | Session Recording | Citrix Session Recording Improper Privilege Management Vulnerability | 25 August 2025 | Citrix Session Recording contains an improper privilege management vulnerability that could allow for privilege escalation to NetworkService Account access. An attacker must be an authenticated user in the same Windows Active Directory domain as the session recording server domain. | Application/System Exploitation |
CVE-2024-8069 | Citrix | Session Recording | Citrix Session Recording Deserialization of Untrusted Data Vulnerability | 25 August 2025 | Citrix Session Recording contains a deserialization of untrusted data vulnerability that allows limited remote code execution with privilege of a NetworkService Account access. Attacker must be an authenticated user on the same intranet as the session recording server. | Direct Remote Network Attack |
CVE-2025-43300 | Apple | iOS, iPadOS, and macOS | Apple iOS iPadOS and macOS Out-of-Bounds Write Vulnerability | 21 August 2025 | Apple iOS iPadOS and macOS contain an out-of-bounds write vulnerability in the Image I/O framework. | Phishing / User Interaction |
CVE-2025-54948 | Trend Micro | Apex One | Trend Micro Apex One OS Command Injection Vulnerability | 18 August 2025 | Trend Micro Apex One Management Console (on-premise) contains an OS command injection vulnerability that could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations. | Direct Remote Network Attack |
CVE-2025-8876 | N-able | N-Central | N-able N-Central Command Injection Vulnerability | 13 August 2025 | N-able N-Central contains a command injection vulnerability via improper sanitization of user input. | Application/System Exploitation |
CVE-2025-8875 | N-able | N-Central | N-able N-Central Insecure Deserialization Vulnerability | 13 August 2025 | N-able N-Central contains an insecure deserialization vulnerability that could lead to command execution. | Application/System Exploitation |
CVE-2025-8088 | RARLAB | WinRAR | RARLAB WinRAR Path Traversal Vulnerability | 12 August 2025 | RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This vulnerability could allow an attacker to execute arbitrary code by crafting malicious archive files. | Application/System Exploitation |
CVE-2007-0671 | Microsoft | Office | Microsoft Office Excel Remote Code Execution Vulnerability | 12 August 2025 | Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. This malicious file could be delivered as an email attachment or hosted on a malicious website. An attacker could leverage this vulnerability by creating a specially crafted Excel file which when opened allowing an attacker to execute remote code on the affected system. | Phishing (Malicious Attachment) |
CVE-2013-3893 | Microsoft | Internet Explorer | Microsoft Internet Explorer Resource Management Errors Vulnerability | 12 August 2025 | Microsoft Internet Explorer contains a memory corruption vulnerability that allows for remote code execution. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. | Phishing / User Interaction |
CVE-2020-25078 | D-Link | DCS-2530L and DCS-2670L Devices | D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability | 05 August 2025 | D-Link DCS-2530L and DCS-2670L devices contains an unspecified vulnerability that could allow for remote administrator password disclosure. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. | Application/System Exploitation |
CVE-2020-25079 | D-Link | DCS-2530L and DCS-2670L Devices | D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability | 05 August 2025 | D-Link DCS-2530L and DCS-2670L devices contains a command injection vulnerability in the cgi-bin/ddns_enc.cgi. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. | Application/System Exploitation |
CVE-2022-40799 | D-Link | DNR-322L | D-Link DNR-322L Download of Code Without Integrity Check Vulnerability | 05 August 2025 | D-Link DNR-322L contains a download of code without integrity check vulnerability that could allow an authenticated attacker to execute OS level commands on the device. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. | Application/System Exploitation |
CVE-2023-2533 | PaperCut | NG/MF | PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability | 28 July 2025 | PaperCut NG/MF contains a cross-site request forgery (CSRF) vulnerability which under specific conditions could potentially enable an attacker to alter security settings or execute arbitrary code. | Application/System Exploitation |
CVE-2025-20337 | Cisco | Identity Services Engine | Cisco Identity Services Engine Injection Vulnerability | 28 July 2025 | Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient validation of user-supplied input allowing an attacker to exploit this vulnerability by submitting a crafted API request. Successful exploitation could allow an attacker to perform remote code execution and obtaining root privileges on an affected device. | Direct Remote Network Attack |
CVE-2025-20281 | Cisco | Identity Services Engine | Cisco Identity Services Engine Injection Vulnerability | 28 July 2025 | Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient validation of user-supplied input allowing an attacker to exploit this vulnerability by submitting a crafted API request. Successful exploitation could allow an attacker to perform remote code execution and obtaining root privileges on an affected device. | Direct Remote Network Attack |
CVE-2025-2775 | SysAid | SysAid On-Prem | SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability | 22 July 2025 | SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Checkin processing functionality allowing for administrator account takeover and file read primitives. | Application/System Exploitation |
CVE-2025-2776 | SysAid | SysAid On-Prem | SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability | 22 July 2025 | SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Server URL processing functionality allowing for administrator account takeover and file read primitives. | Application/System Exploitation |
CVE-2025-6558 | Google | Chromium | Google Chromium ANGLE and GPU Improper Input Validation Vulnerability | 22 July 2025 | Google Chromium contains an improper input validation vulnerability in ANGLE and GPU. This vulnerability could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium including but not limited to Google Chrome Microsoft Edge and Opera. | Phishing (Malicious Link) |
CVE-2025-54309 | CrushFTP | CrushFTP | CrushFTP Unprotected Alternate Channel Vulnerability | 22 July 2025 | CrushFTP contains an unprotected alternate channel vulnerability. When the DMZ proxy feature is not used mishandles AS2 validation and consequently allows remote attackers to obtain admin access via HTTPS. | Application/System Exploitation |
CVE-2025-49704 | Microsoft | SharePoint | Microsoft SharePoint Code Injection Vulnerability | 22 July 2025 | Microsoft SharePoint contains a code injection vulnerability that could allow an authorized attacker to execute code over a network. This vulnerability could be chained with CVE-2025-49706. CVE-2025-53770 is a patch bypass for CVE-2025-49704 and the updates for CVE-2025-53770 include more robust protection than those for CVE-2025-49704. | Phishing / User Interaction |
CVE-2025-49706 | Microsoft | SharePoint | Microsoft SharePoint Improper Authentication Vulnerability | 22 July 2025 | Microsoft SharePoint contains an improper authentication vulnerability that allows an authorized attacker to perform spoofing over a network. Successfully exploitation could allow an attacker to view sensitive information and make some changes to disclosed information. This vulnerability could be chained with CVE-2025-49704. CVE-2025-53771 is a patch bypass for CVE-2025-49706 and the updates for CVE-2025-53771 include more robust protection than those for CVE-2025-49706. | Phishing / User Interaction |
CVE-2025-53770 | Microsoft | SharePoint | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 20 July 2025 | Microsoft SharePoint Server on-premises contains a deserialization of untrusted data vulnerability that could allow an unauthorized attacker to execute code over a network. This vulnerability could be chained with CVE-2025-53771. CVE-2025-53770 is a patch bypass for CVE-2025-49704 and the updates for CVE-2025-53770 include more robust protection than those for CVE-2025-49704. | Application/System Exploitation |
CVE-2025-25257 | Fortinet | FortiWeb | Fortinet FortiWeb SQL Injection Vulnerability | 18 July 2025 | Fortinet FortiWeb contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized SQL code or commands via crafted HTTP or HTTPs requests. | Perimeter Gateway Breach |
CVE-2025-47812 | Wing FTP Server | Wing FTP Server | Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability | 14 July 2025 | Wing FTP Server contains an improper neutralization of null byte or NUL character vulnerability that can allow injection of arbitrary Lua code into user session files. This can be used to execute arbitrary system commands with the privileges of the FTP service (root or SYSTEM by default). | Application/System Exploitation |
CVE-2025-5777 | Citrix | NetScaler ADC and Gateway | Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability | 10 July 2025 | Citrix NetScaler ADC and Gateway contain an out-of-bounds read vulnerability due to insufficient input validation. This vulnerability can lead to memory overread when the NetScaler is configured as a Gateway (VPN virtual server ICA Proxy CVPN RDP Proxy) OR AAA virtual server. | Perimeter Gateway Breach |
CVE-2019-9621 | Synacor | Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability | 07 July 2025 | Synacor Zimbra Collaboration Suite (ZCS) contains a server-side request forgery (SSRF) vulnerability via the ProxyServlet component. | Application/System Exploitation |
CVE-2019-5418 | Rails | Ruby on Rails | Rails Ruby on Rails Path Traversal Vulnerability | 07 July 2025 | Rails Ruby on Rails contains a path traversal vulnerability in Action View. Specially crafted accept headers in combination with calls to `render file:` can cause arbitrary files on the target server to be rendered disclosing the file contents. | Application/System Exploitation |
CVE-2016-10033 | PHP | PHPMailer | PHPMailer Command Injection Vulnerability | 07 July 2025 | PHPMailer contains a command injection vulnerability because it fails to sanitize user-supplied input. Specifically this issue affects the 'mail()' function of 'class.phpmailer.php' script. An attacker can exploit this issue to execute arbitrary code within the context of the application. Failed exploit attempts will result in a denial-of-service condition. | Application/System Exploitation |
CVE-2014-3931 | Looking Glass | Multi-Router Looking Glass (MRLG) | Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability | 07 July 2025 | Multi-Router Looking Glass (MRLG) contains a buffer overflow vulnerability that could allow remote attackers to cause an arbitrary memory write and memory corruption. | Application/System Exploitation |
CVE-2025-6554 | Google | Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 02 July 2025 | Google Chromium V8 contains a type confusion vulnerability that could allow a remote attacker to perform arbitrary read/write via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium including but not limited to Google Chrome Microsoft Edge and Opera. | Phishing (Malicious Link) |
CVE-2025-48928 | TeleMessage | TM SGNL | TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability | 01 July 2025 | TeleMessage TM SGNL contains an exposure of core dump file to an unauthorized control sphere Vulnerability. This vulnerability is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password previously sent over HTTP would be included in this dump. | Application/System Exploitation |
CVE-2025-48927 | TeleMessage | TM SGNL | TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability | 01 July 2025 | TeleMessage TM SGNL contains an initialization of a resource with an insecure default vulnerability. This vulnerability relies on how the Spring Boot Actuator is configured with an exposed heap dump endpoint at a /heapdump URI. | Application/System Exploitation |
CVE-2025-6543 | Citrix | NetScaler ADC and Gateway | Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability | 30 June 2025 | Citrix NetScaler ADC and Gateway contain a buffer overflow vulnerability leading to unintended control flow and Denial of Service. NetScaler must be configured as Gateway (VPN virtual server ICA Proxy CVPN RDP Proxy) OR AAA virtual server. | Perimeter Gateway Breach |
CVE-2019-6693 | Fortinet | FortiOS | Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability | 25 June 2025 | Fortinet FortiOS contains a use of hard-coded credentials vulnerability that could allow an attacker to cipher sensitive data in FortiOS configuration backup file via knowledge of the hard-coded key. | Perimeter Gateway Breach |
CVE-2024-0769 | D-Link | DIR-859 Router | D-Link DIR-859 Router Path Traversal Vulnerability | 25 June 2025 | D-Link DIR-859 routers contain a path traversal vulnerability in the file /hedwig.cgi of the component HTTP POST Request Handler. Manipulation of the argument service with the input ../../../../htdocs/webinc/getcfg/DHCPS6.BRIDGE-1.xml allows for the leakage of session data potentially enabling privilege escalation and unauthorized control of the device. This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions. | Application/System Exploitation |
CVE-2024-54085 | AMI | MegaRAC SPx | AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability | 25 June 2025 | AMI MegaRAC SPx contains an authentication bypass by spoofing vulnerability in the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality integrity and/or availability. | Application/System Exploitation |
CVE-2023-0386 | Linux | Kernel | Linux Kernel Improper Ownership Management Vulnerability | 17 June 2025 | Linux Kernel contains an improper ownership management vulnerability where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system. | Application/System Exploitation |
CVE-2023-33538 | TP-Link | Multiple Routers | TP-Link Multiple Routers Command Injection Vulnerability | 16 June 2025 | TP-Link TL-WR940N V2/V4 TL-WR841N V8/V10 and TL-WR740N V1/V2 contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. | Application/System Exploitation |
CVE-2025-43200 | Apple | Multiple Products | Apple Multiple Products Unspecified Vulnerability | 16 June 2025 | Apple iOS iPadOS macOS watchOS and visionOS contain an unspecified vulnerability when processing a maliciously crafted photo or video shared via an iCloud Link. | Phishing (Malicious Link) |
CVE-2025-33053 | Microsoft | Windows | Microsoft Windows External Control of File Name or Path Vulnerability | 10 June 2025 | Microsoft Windows contains an external control of file name or path vulnerability that could allow an attacker to execute code from a remote WebDAV location specified by the WorkingDirectory attribute of Internet Shortcut files. | Phishing (Malicious Attachment) |
CVE-2025-24016 | Wazuh | Wazuh Server | Wazuh Server Deserialization of Untrusted Data Vulnerability | 10 June 2025 | Wazuh contains a deserialization of untrusted data vulnerability that allows for remote code execution on Wazuh servers. | Direct Remote Network Attack |
CVE-2024-42009 | Roundcube | Webmail | RoundCube Webmail Cross-Site Scripting Vulnerability | 09 June 2025 | RoundCube Webmail contains a cross-site scripting vulnerability. This vulnerability could allow a remote attacker to steal and send emails of a victim via a crafted e-mail message that abuses a Desanitization issue in message_body() in program/actions/mail/show.php. | Application/System Exploitation |
CVE-2025-32433 | Erlang | Erlang/OTP | Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability | 09 June 2025 | Erlang Erlang/OTP SSH server contains a missing authentication for critical function vulnerability. This could allow an attacker to execute arbitrary commands without valid credentials potentially leading to unauthenticated remote code execution (RCE). By exploiting a flaw in how SSH protocol messages are handled a malicious actor could gain unauthorized access to affected systems. This vulnerability could affect various products that implement Erlang/OTP SSH server including—but not limited to—Cisco NetApp and SUSE. | Direct Remote Network Attack |
CVE-2025-5419 | Google | Chromium V8 | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability | 05 June 2025 | Google Chromium V8 contains an out-of-bounds read and write vulnerability that could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium including but not limited to Google Chrome Microsoft Edge and Opera. | Phishing (Malicious Link) |
CVE-2025-21479 | Qualcomm | Multiple Chipsets | Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability | 03 June 2025 | Multiple Qualcomm chipsets contain an incorrect authorization vulnerability. This vulnerability allows for memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands. | Application/System Exploitation |
CVE-2025-21480 | Qualcomm | Multiple Chipsets | Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability | 03 June 2025 | Multiple Qualcomm chipsets contain an incorrect authorization vulnerability. This vulnerability allows for memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands. | Application/System Exploitation |
CVE-2025-27038 | Qualcomm | Multiple Chipsets | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 03 June 2025 | Multiple Qualcomm chipsets contain a use-after-free vulnerability. This vulnerability allows for memory corruption while rendering graphics using Adreno GPU drivers in Chrome. | Application/System Exploitation |
CVE-2021-32030 | ASUS | Routers | ASUS Routers Improper Authentication Vulnerability | 02 June 2025 | ASUS Lyra Mini and ASUS GT-AC2900 devices contain an improper authentication vulnerability that allows an attacker to gain unauthorized access to the administrative interface. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. | Application/System Exploitation |
CVE-2025-3935 | ConnectWise | ScreenConnect | ConnectWise ScreenConnect Improper Authentication Vulnerability | 02 June 2025 | ConnectWise ScreenConnect contains an improper authentication vulnerability. This vulnerability could allow a ViewState code injection attack which could allow remote code execution if machine keys are compromised. | Direct Remote Network Attack |
CVE-2025-35939 | Craft CMS | Craft CMS | Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability | 02 June 2025 | Craft CMS contains an external control of assumed-immutable web parameter vulnerability. This vulnerability could allow an unauthenticated client to introduce arbitrary values such as PHP code to a known local file location on the server. This vulnerability could be chained with CVE-2024-58136 as represented by CVE-2025-32432. | Direct Remote Network Attack |
CVE-2024-56145 | Craft CMS | Craft CMS | Craft CMS Code Injection Vulnerability | 02 June 2025 | Craft CMS contains a code injection vulnerability. Users with affected versions are vulnerable to remote code execution if their php.ini configuration has `register_argc_argv` enabled. | Direct Remote Network Attack |
CVE-2023-39780 | ASUS | RT-AX55 Routers | ASUS RT-AX55 Routers OS Command Injection Vulnerability | 02 June 2025 | ASUS RT-AX55 devices contain an OS command injection vulnerability that could allow a remote authenticated attacker to execute arbitrary commands. As represented by CVE-2023-41346. | Application/System Exploitation |
CVE-2025-4632 | Samsung | MagicINFO 9 Server | Samsung MagicINFO 9 Server Path Traversal Vulnerability | 22 May 2025 | Samsung MagicINFO 9 Server contains a path traversal vulnerability that allows an attacker to write arbitrary file as system authority. | Application/System Exploitation |
CVE-2023-38950 | ZKTeco | BioTime | ZKTeco BioTime Path Traversal Vulnerability | 19 May 2025 | ZKTeco BioTime contains a path traversal vulnerability in the iclock API that allows an unauthenticated attacker to read arbitrary files via supplying a crafted payload. | Direct Remote Network Attack |
CVE-2024-27443 | Synacor | Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 19 May 2025 | Zimbra Collaboration contains a cross-site scripting (XSS) vulnerability in the CalendarInvite feature of the Zimbra webmail classic user interface. An attacker can exploit this vulnerability via an email message containing a crafted calendar header leading to the execution of arbitrary JavaScript code. | Application/System Exploitation |
CVE-2025-27920 | Srimax | Output Messenger | Srimax Output Messenger Directory Traversal Vulnerability | 19 May 2025 | Srimax Output Messenger contains a directory traversal vulnerability that allows an attacker to access sensitive files outside the intended directory potentially leading to configuration leakage or arbitrary file access. | Application/System Exploitation |
CVE-2024-11182 | MDaemon | Email Server | MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability | 19 May 2025 | MDaemon Email Server contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to load arbitrary JavaScript code via an HTML e-mail message. | Application/System Exploitation |
CVE-2025-4428 | Ivanti | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | 19 May 2025 | Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability in the API component that allows an authenticated attacker to remotely execute arbitrary code via crafted API requests. This vulnerability results from an insecure implementation of the Hibernate Validator open-source library as represented by CVE-2025-35036. | Application/System Exploitation |
CVE-2025-4427 | Ivanti | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability | 19 May 2025 | Ivanti Endpoint Manager Mobile (EPMM) contains an authentication bypass vulnerability in the API component that allows an attacker to access protected resources without proper credentials via crafted API requests. This vulnerability results from an insecure implementation of the Spring Framework open-source library. | Application/System Exploitation |
CVE-2025-42999 | SAP | NetWeaver | SAP NetWeaver Deserialization Vulnerability | 15 May 2025 | SAP NetWeaver Visual Composer Metadata Uploader contains a deserialization vulnerability that allows a privileged attacker to compromise the confidentiality integrity and availability of the host system by deserializing untrusted or malicious content. | Application/System Exploitation |
CVE-2024-12987 | DrayTek | Vigor Routers | DrayTek Vigor Routers OS Command Injection Vulnerability | 15 May 2025 | DrayTek Vigor2960 Vigor300B and Vigor3900 routers contain an OS command injection vulnerability due to an unknown function of the file /cgi-bin/mainfunction.cgi/apmcfgupload of the component web management interface. | Application/System Exploitation |
CVE-2025-32756 | Fortinet | Multiple Products | Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability | 14 May 2025 | Fortinet FortiFone FortiVoice FortiNDR and FortiMail contain a stack-based overflow vulnerability that may allow a remote unauthenticated attacker to execute arbitrary code or commands via crafted HTTP requests. | Perimeter Gateway Breach |
CVE-2025-32709 | Microsoft | Windows | Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability | 13 May 2025 | Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to escalate privileges to administrator. | Phishing / User Interaction |
CVE-2025-30397 | Microsoft | Windows | Microsoft Windows Scripting Engine Type Confusion Vulnerability | 13 May 2025 | Microsoft Windows Scripting Engine contains a type confusion vulnerability that allows an unauthorized attacker to execute code over a network via a specially crafted URL. | Phishing (Malicious Link) |
CVE-2025-32706 | Microsoft | Windows | Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability | 13 May 2025 | Microsoft Windows Common Log File System (CLFS) Driver contains a heap-based buffer overflow vulnerability that allows an authorized attacker to elevate privileges locally. | Phishing (Malicious Attachment) |
CVE-2025-32701 | Microsoft | Windows | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability | 13 May 2025 | Microsoft Windows Common Log File System (CLFS) Driver contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally. | Phishing (Malicious Attachment) |
CVE-2025-30400 | Microsoft | Windows | Microsoft Windows DWM Core Library Use-After-Free Vulnerability | 13 May 2025 | Microsoft Windows DWM Core Library contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally. | Phishing / User Interaction |
CVE-2025-47729 | TeleMessage | TM SGNL | TeleMessage TM SGNL Hidden Functionality Vulnerability | 12 May 2025 | TeleMessage TM SGNL contains a hidden functionality vulnerability in which the archiving backend holds cleartext copies of messages from TM SGNL application users. | Application/System Exploitation |
CVE-2024-11120 | GeoVision | Multiple Devices | GeoVision Devices OS Command Injection Vulnerability | 07 May 2025 | Multiple GeoVision devices contain an OS command injection vulnerability that allows a remote unauthenticated attacker to inject and execute arbitrary system commands. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. | Direct Remote Network Attack |
CVE-2024-6047 | GeoVision | Multiple Devices | GeoVision Devices OS Command Injection Vulnerability | 07 May 2025 | Multiple GeoVision devices contain an OS command injection vulnerability that allows a remote unauthenticated attacker to inject and execute arbitrary system commands. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. | Direct Remote Network Attack |
CVE-2025-27363 | FreeType | FreeType | FreeType Out-of-Bounds Write Vulnerability | 06 May 2025 | FreeType contains an out-of-bounds write vulnerability when attempting to parse font subglyph structures related to TrueType GX and variable font files that may allow for arbitrary code execution. | Application/System Exploitation |
CVE-2025-3248 | Langflow | Langflow | Langflow Missing Authentication Vulnerability | 05 May 2025 | Langflow contains a missing authentication vulnerability in the /api/v1/validate/code endpoint that allows a remote unauthenticated attacker to execute arbitrary code via crafted HTTP requests. | Direct Remote Network Attack |
CVE-2025-34028 | Commvault | Command Center | Commvault Command Center Path Traversal Vulnerability | 02 May 2025 | Commvault Command Center contains a path traversal vulnerability that allows a remote unauthenticated attacker to execute arbitrary code. | Direct Remote Network Attack |
CVE-2024-58136 | Yiiframework | Yii | Yiiframework Yii Improper Protection of Alternate Path Vulnerability | 02 May 2025 | Yii Framework contains an improper protection of alternate path vulnerability that may allow a remote attacker to execute arbitrary code. This vulnerability could affect other products that implement Yii including—but not limited to—Craft CMS as represented by CVE-2025-32432. | Application/System Exploitation |
CVE-2024-38475 | Apache | HTTP Server | Apache HTTP Server Improper Escaping of Output Vulnerability | 01 May 2025 | Apache HTTP Server contains an improper escaping of output vulnerability in mod_rewrite that allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL resulting in code execution or source code disclosure. | Application/System Exploitation |
CVE-2023-44221 | SonicWall | SMA100 Appliances | SonicWall SMA100 Appliances OS Command Injection Vulnerability | 01 May 2025 | SonicWall SMA100 appliances contain an OS command injection vulnerability in the SSL-VPN management interface that allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user. | Perimeter Gateway Breach |
CVE-2025-31324 | SAP | NetWeaver | SAP NetWeaver Unrestricted File Upload Vulnerability | 29 April 2025 | SAP NetWeaver Visual Composer Metadata Uploader contains an unrestricted file upload vulnerability that allows an unauthenticated agent to upload potentially malicious executable binaries. | Direct Remote Network Attack |
CVE-2025-1976 | Broadcom | Brocade Fabric OS | Broadcom Brocade Fabric OS Code Injection Vulnerability | 28 April 2025 | Broadcom Brocade Fabric OS contains a code injection vulnerability that allows a local user with administrative privileges to execute arbitrary code with full root privileges. | Application/System Exploitation |
CVE-2025-42599 | Qualitia | Active! Mail | Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability | 28 April 2025 | Qualitia Active! Mail contains a stack-based buffer overflow vulnerability that allows a remote unauthenticated attacker to execute arbitrary or trigger a denial-of-service via a specially crafted request. | Direct Remote Network Attack |
CVE-2025-3928 | Commvault | Web Server | Commvault Web Server Unspecified Vulnerability | 28 April 2025 | Commvault Web Server contains an unspecified vulnerability that allows a remote authenticated attacker to create and execute webshells. | Application/System Exploitation |
CVE-2025-24054 | Microsoft | Windows | Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability | 17 April 2025 | Microsoft Windows NTLM contains an external control of file name or path vulnerability that allows an unauthorized attacker to perform spoofing over a network. | Phishing (Malicious Attachment) |
Opeining times are listed here
Follow or connect with Steve, RiskCentric's owner & founder via LinkedIn
bottom of page