Active threat advisories and known exploited vulnerabilities.

Critical CVE-2025-20352 Cisco · IOS and IOS XE Added Sep 29, 2025

Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability

Cisco IOS and IOS XE contains a stack-based buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) subsystem that could allow for denial of service or remote code execution. A successful exploit could allow a low-privileged attacker to cause the affected system to reload, resulting in a DoS condition, or allow a high-privileged attacker to execute arbitrary code as the root user and obtain full control of the affected system.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2021-21311 Adminer · Adminer Added Sep 29, 2025

Adminer Server-Side Request Forgery Vulnerability

Adminer contains a server-side request forgery vulnerability that, when exploited, allows a remote attacker to obtain potentially sensitive information.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2025-20362 Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Added Sep 25, 2025

Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability

Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a missing authorization vulnerability. This vulnerability could be chained with CVE-2025-20333.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2025-20333 Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Added Sep 25, 2025

Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability

Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a buffer overflow vulnerability that allows for remote code execution. This vulnerability could be chained with CVE-2025-20362.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2025-10585 Google · Chromium V8 Added Sep 23, 2025

Google Chromium V8 Type Confusion Vulnerability

Google Chromium contains a type confusion vulnerability in the V8 JavaScript and WebAssembly engine.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2025-5086 Dassault Systèmes · DELMIA Apriso Added Sep 11, 2025

Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability

Dassault Systèmes DELMIA Apriso contains a deserialization of untrusted data vulnerability that could lead to a remote code execution.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2025-38352 Linux · Kernel Added Sep 4, 2025

Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability

Linux kernel contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that has a high impact on confidentiality, integrity, and availability.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2025-48543 Android · Runtime Added Sep 4, 2025

Android Runtime Use-After-Free Vulnerability

Android Runtime contains a use-after-free vulnerability potentially allowing a chrome sandbox escape leading to local privilege escalation.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2025-53690 Sitecore · Multiple Products Added Sep 4, 2025

Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability

Sitecore Experience Manager (XM), Experience Platform (XP), Experience Commerce (XC), and Managed Cloud contain a deserialization of untrusted data vulnerability involving the use of default machine keys. This flaw allows attackers to exploit exposed ASP.NET machine keys to achieve remote code execution.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2023-50224 TP-Link · TL-WR841N Added Sep 3, 2025

TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability

TP-Link TL-WR841N contains an authentication bypass by spoofing vulnerability within the httpd service, which listens on TCP port 80 by default, leading to the disclose of stored credentials. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2025-9377 TP-Link · Multiple Routers Added Sep 3, 2025

TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability

TP-Link Archer C7(EU) and TL-WR841N/ND(MS) contain an OS command injection vulnerability that exists in the Parental Control page. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2020-24363 TP-Link · TL-WA855RE Added Sep 2, 2025

TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability

TP-link TL-WA855RE contains a missing authentication for critical function vulnerability. This vulnerability could allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by setting a new administrative password. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2025-55177 Meta Platforms · WhatsApp Added Sep 2, 2025

Meta Platforms WhatsApp Incorrect Authorization Vulnerability

Meta Platforms WhatsApp contains an incorrect authorization vulnerability due to an incomplete authorization of linked device synchronization messages. This vulnerability could allow an unrelated user to trigger processing of content from an arbitrary URL on a target’s device.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2025-57819 Sangoma · FreePBX Added Aug 29, 2025

Sangoma FreePBX Authentication Bypass Vulnerability

Sangoma FreePBX contains an authentication bypass vulnerability due to insufficiently sanitized user-supplied data allows unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2025-7775 Citrix · NetScaler Added Aug 26, 2025

Citrix NetScaler Memory Overflow Vulnerability

Citrix NetScaler ADC and NetScaler Gateway contain a memory overflow vulnerability that could allow for remote code execution and/or denial of service.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2024-8068 Citrix · Session Recording Added Aug 25, 2025

Citrix Session Recording Improper Privilege Management Vulnerability

Citrix Session Recording contains an improper privilege management vulnerability that could allow for privilege escalation to NetworkService Account access. An attacker must be an authenticated user in the same Windows Active Directory domain as the session recording server domain.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2024-8069 Citrix · Session Recording Added Aug 25, 2025

Citrix Session Recording Deserialization of Untrusted Data Vulnerability

Citrix Session Recording contains a deserialization of untrusted data vulnerability that allows limited remote code execution with privilege of a NetworkService Account access. Attacker must be an authenticated user on the same intranet as the session recording server.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2025-48384 Git · Git Added Aug 25, 2025

Git Link Following Vulnerability

Git contains a link following vulnerability that stems from Git’s inconsistent handling of carriage return characters in configuration files.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2025-43300 Apple · iOS, iPadOS, and macOS Added Aug 21, 2025

Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

Apple iOS, iPadOS, and macOS contain an out-of-bounds write vulnerability in the Image I/O framework.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2025-54948 Trend Micro · Apex One Added Aug 18, 2025

Trend Micro Apex One OS Command Injection Vulnerability

Trend Micro Apex One Management Console (on-premise) contains an OS command injection vulnerability that could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2025-8876 N-able · N-Central Added Aug 13, 2025

N-able N-Central Command Injection Vulnerability

N-able N-Central contains a command injection vulnerability via improper sanitization of user input.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2025-8875 N-able · N-Central Added Aug 13, 2025

N-able N-Central Insecure Deserialization Vulnerability

N-able N-Central contains an insecure deserialization vulnerability that could lead to command execution.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2013-3893 Microsoft · Internet Explorer Added Aug 12, 2025

Microsoft Internet Explorer Resource Management Errors Vulnerability

Microsoft Internet Explorer contains a memory corruption vulnerability that allows for remote code execution. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2025-8088 RARLAB · WinRAR Added Aug 12, 2025

RARLAB WinRAR Path Traversal Vulnerability

RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This vulnerability could allow an attacker to execute arbitrary code by crafting malicious archive files.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Critical CVE-2007-0671 Microsoft · Office Added Aug 12, 2025

Microsoft Office Excel Remote Code Execution Vulnerability

Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. This malicious file could be delivered as an email attachment or hosted on a malicious website. An attacker could leverage this vulnerability by creating a specially crafted Excel file, which, when opened, allowing an attacker to execute remote code on the affected system.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed