Sign in Subscribe

ThreatGrid Team

PostgreSQL SQL Injection Flaw (CVE-2025-27741) Exposes Databases to Data Theft

PostgreSQL SQL Injection Flaw (CVE-2025-27741) Exposes Databases to Data Theft

PostgreSQL users should update immediately to address CVE-2025-27741, a SQL injection flaw that could allow attackers to steal, alter, or delete sensitive data through unsafe query handling.

VMware ESXi Remote Code Execution (CVE-2025-26012): Hypervisor Security in the Crosshairs

VMware ESXi Remote Code Execution (CVE-2025-26012): Hypervisor Security in the Crosshairs

VMware ESXi users are urged to patch immediately after the discovery of CVE-2025-26012, a critical RCE flaw that could allow attackers to seize control of entire virtualized environments from a single network request.

Cisco IOS XE Privilege Escalation (CVE-2025-30041): From User to Root in One Step

Cisco IOS XE Privilege Escalation (CVE-2025-30041): From User to Root in One Step

Cisco has patched a high-severity flaw in IOS XE that lets attackers with local credentials escalate to root privileges. CVE-2025-30041 puts enterprise routers, switches, and wireless controllers at risk of complete takeover.

Atlassian Confluence Data Exposure (CVE-2025-21984): Sensitive Wiki Content at Risk

Atlassian Confluence Data Exposure (CVE-2025-21984): Sensitive Wiki Content at Risk

Atlassian has patched a Confluence flaw that could let attackers read private wiki pages without proper permissions. CVE-2025-21984 poses serious data leakage risks for organizations that store sensitive information in Confluence.

Fortinet FortiOS Buffer Overflow (CVE-2025-14982): Critical RCE Risk for Firewalls

Fortinet FortiOS Buffer Overflow (CVE-2025-14982): Critical RCE Risk for Firewalls

Fortinet has patched a critical SSL VPN buffer overflow in FortiOS that could let attackers take over firewalls without authentication. CVE-2025-14982 is internet-exploitable, making quick mitigation essential.

Cisco Secure Client Privilege Escalation (CVE-2025-31125): What You Need to Know

Cisco Secure Client Privilege Escalation (CVE-2025-31125): What You Need to Know

Cisco has patched a high-severity flaw in Secure Client for Windows that could let attackers gain SYSTEM privileges. CVE-2025-31125 is already being targeted in the wild, making rapid patching critical.

Critical Erlang OTP SSH Daemon Zero-Day Exploited in OT Networks (CVE-2025-32433)

Critical Erlang OTP SSH Daemon Zero-Day Exploited in OT Networks (CVE-2025-32433)

A severe remote code execution zero-day—CVE-2025-32433—has been actively exploited in critical infrastructure environments via Erlang’s OTP SSH daemon. Operators must patch immediately and monitor OT environments for signs of post-exploit activity.