Abusing HTTP HEAD for Java Deserialization RCE (CVE-2025-12059)

CVE-2025-12059 CWE-502, 538 Unauthenticated Java Deserialization RCE via HTTP HEAD Request Date: 2025-10-04 Severity: Critical (CVSS v3.1 = 9.8 ) (Full system compromise risk) AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Etki Kapsamı: Startupv3.29.6.4 Finder : Enay Sınıflar: com.lbs.start.JLbsStartup , com.lbs.start.SocketToken https://www.cve.org/cverecord?id=CVE-2025-12059 The application uses the DOCUMENT_URI parameter contained in the J


CVE-2025-6982 | Vulnerability of TP-Link Archer C50

Hi everyone, I’m researching CVE-2025-6982 , which affects the TP-Link Archer C50 and potentially allows access to administrative credentials and Wi-Fi passwords. Despite my efforts, I haven’t been able to find the specific Proof of Concept (PoC) or exploit code for it. I apologize if this seems like a basic question, but I’ve hit a dead end in my search. Does anyone know where to find documentation or exploit details for vulnerabilities that


Yes, of course! That would be great, especially the one for the iPhone. I was actually hoping for more—what about making some tutorials on one-click exploit development for the iPhone? e.g : CVE-2025-24252, CVE-2026-20700, CVE-2025-24132, CVE-2025-43200, CVE-2025-43300, CVE-2026-20661, CVE-2025-43529


Cve-2026-23416-poc

This is a poc for vulnerability I discovered in linux kernel 6.17-linux kernel 7 rc5 github.com GitHub - bluedragonsecurity/CVE-2026-23416-POC: POC for CVE-2026-23416 (linux kernel 6.17-linux... POC for CVE-2026-23416 (linux kernel 6.17-linux kernel 7 rc5) - vulnerability discovered by Antonius SUMMARY An invariant violation (VM_WARN_ON_VMG) fires at mm/vma.c:830 inside vma_merge_existing_range() when mseal(2) is called with a range spanning two adjacent VMAs where one has VM


Below Local Privilege Escalation Vulnerability: A light look at CVE-2025-27591

This topic is for discussion of the post Below Local Privilege Escalation Vulnerability: A light look at CVE-2025-27591 . CVE-2025-27591 is a Local Privilege Escalation (LPE) vulnerability affecting below, a time-traveling resource monitor for Linux developed by Facebook Incubator. Please feel free to discuss the post and ask any questions in this topic.


Microsoft SharePoint Server Improper Input Validation Vulnerability

Affected: Microsoft SharePoint Server

Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unauthorized attacker to perform spoofing over a network.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-20

[Source: CISA Known Exploited Vulnerab


Microsoft Windows Link Following Vulnerability

Affected: Microsoft Windows

Microsoft Windows contains a link following vulnerability that allows for privilege escalation

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-59

[Source: CISA Known Exploited Vulnerabilities Catalog]


Fortinet SQL Injection Vulnerability

Affected: Fortinet FortiClient EMS

Fortinet FortiClient EMS contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-89

[Source: CISA Known Exploited Vulnera


Adobe Acrobat and Reader Prototype Pollution Vulnerability

Affected: Adobe Acrobat and Reader

Adobe Acrobat and Reader contain a prototype pollution vulnerability that allows for arbitrary code execution.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-1321

[Source: CISA Known Exploited Vulnerabilities Catalog]


Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

Affected: Ivanti Endpoint Manager Mobile (EPMM)

Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that could allow attackers to achieve unauthenticated remote code execution.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-94

[Source: CISA Known Exploit


Fortinet FortiClient EMS Improper Access Control Vulnerability

Affected: Fortinet FortiClient EMS

Fortinet FortiClient EMS contains an improper access control vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-284

[Source: CISA Kno


TrueConf Client Download of Code Without Integrity Check Vulnerability

Affected: TrueConf Client

TrueConf Client contains a download of code without integrity check vulnerability. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater, this may result in arbitrary code execution in the context of the updating process or user.

Required Action: Apply mitigations per vendor instructions, follo


Google Dawn Use-After-Free Vulnerability

Affected: Google Dawn

Google Dawn contains an use-after-free vulnerability that could allow a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. This vulnerability could affect multiple Chromium-based products including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services,


Citrix NetScaler Out-of-Bounds Read Vulnerability

Affected: Citrix NetScaler

Citrix NetScaler ADC (formerly Citrix ADC), NetScaler Gateway (formerly Citrix Gateway) and NetScaler ADC FIPS and NDcPP contain an out-of-bounds reads vulnerability when configured as a SAML IDP leading to memory overread.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-


F5 BIG-IP Stack-Based Buffer Overflow Vulnerability

Affected: F5 BIG-IP

F5 BIG-IP APM contains a stack-based buffer overflow vulnerability that could allow a threat actor to achieve remote code execution.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-121

[Source: CISA Known Exploited Vulnerabilities Catalog]


Aquasecurity Trivy Embedded Malicious Code Vulnerability

Affected: Aquasecurity Trivy

Aquasecurity Trivy contains an embedded malicious code vulnerability that could allow an attacker to gain access to everything in the CI/CD environment, including all tokens, SSH keys, cloud credentials, database passwords, and any sensitive configuration in memory.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the p


Langflow Code Injection Vulnerability

Affected: Langflow Langflow

Langflow contains a code injection vulnerability that could allow building public flows without requiring authentication.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-94, CWE-95, CWE-306

[Source: CISA Known Exploited Vulnerabilities Catalog]


Craft CMS Code Injection Vulnerability

Affected: Craft CMS Craft CMS

Craft CMS contains a code injection vulnerability that allows a remote attacker to execute arbitrary code.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-94

[Source: CISA Known Exploited Vulnerabilities Catalog]


Laravel Livewire Code Injection Vulnerability

Affected: Laravel Livewire

Laravel Livewire contain a code injection vulnerability that could allow unauthenticated attackers to achieve remote command execution in specific scenarios.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-94

[Source: CISA Known Exploited Vulnerabilities Catalog]


Apple Multiple Products Improper Locking Vulnerability

Affected: Apple Multiple Products

Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain an improper locking vulnerability that could allow a malicious application to cause unexpected changes in memory shared between processes.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-667

[Sourc


Apple Multiple Products Classic Buffer Overflow Vulnerability

Affected: Apple Multiple Products

Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain a classic buffer overflow vulnerability which could allow a malicious application to cause unexpected system termination or write kernel memory.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CW


Apple Multiple Products Buffer Overflow Vulnerability

Affected: Apple Multiple Products

Apple Safari, iOS, watchOS, visionOS, iPadOS, macOS, and tvOS contain a buffer overflow vulnerability that could allow the processing of maliciously crafted web content which may lead to memory corruption.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-119

[S


Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability

Affected: Cisco Secure Firewall Management Center (FMC)

Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain a deserialization of untrusted data vulnerability in the web-based management interface that could allow an unauthenticated, remote attacker to execute arbitr


Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability

Affected: Synacor Zimbra Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability in the Classic UI where attackers could abuse Cascading Style Sheets (CSS) @import directives in email HTML.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unav


Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Affected: Microsoft SharePoint

Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-502

[Source: CISA Known Exploited Vulnerabilities C


Wing FTP Server Information Disclosure Vulnerability

Affected: Wing FTP Server Wing FTP Server

Wing FTP Server contains a generation of error message containing sensitive information vulnerability when using a long value in the UID cookie.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-209

[Source: CISA Known Exploited Vulnerabilities Catalog]


Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability

Affected: Google Chromium V8

Google Chromium V8 contains an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and O


Google Skia Out-of-Bounds Write Vulnerability

Affected: Google Skia

Google Skia contains an out-of-bounds write vulnerability that could allow a remote attacker to perform out of bounds memory access via a crafted HTML page. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are


n8n Improper Control of Dynamically-Managed Code Resources Vulnerability

Affected: n8n n8n

n8n contains an improper control of dynamically managed code resources vulnerability in its workflow expression evaluation system that allows for remote code execution.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-913

[Source: CISA Known Exploited Vulner


SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

Affected: SolarWinds Web Help Desk

SolarWinds Web Help Desk contain a deserialization of untrusted data vulnerability in AjaxProxy that could allow an attacker to run commands on the host machine.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-502

[Source: CISA Known Exploi


Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability

Affected: Ivanti  Endpoint Manager (EPM)

Ivanti Endpoint Manager (EPM) contains an authentication bypass using an alternate path or channel vulnerability that could allow a remote unauthenticated attacker to leak specific stored credential data.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

C


Broadcom VMware Aria Operations Command Injection Vulnerability

Affected: Broadcom VMware Aria Operations

Broadcom VMware Aria Operations formerly known as vRealize Operations (vROps) contains a command injection vulnerability that allows an unauthenticated attacker to execute arbitrary commands, potentially leading to remote code execution during support‑assisted product migration.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud serv


Qualcomm Multiple Chipsets Memory Corruption Vulnerability

Affected: Qualcomm Multiple Chipsets

Multiple Qualcomm chipsets contain a memory corruption vulnerability while using alignments for memory allocation.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-190

[Source: CISA Known Exploited Vulnerabilities Catalog]


Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability

Affected: Cisco Catalyst SD-WAN Controller and Manager

Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, contain an authentication bypass vulnerability could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system. This vulnerability exists because the peering authentication mec


Soliton Systems K.K FileZen OS Command Injection Vulnerability

Affected: Soliton Systems K.K FileZen

Soliton Systems K.K FileZen contains an OS command injection vulnerability when an user logs-in to the affected product and sends a specially crafted HTTP request.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-78

[Source: CISA Known Exploited Vu


RoundCube Webmail Deserialization of Untrusted Data Vulnerability

Affected: Roundcube Webmail

RoundCube Webmail contains a deserialization of untrusted data vulnerability that allows remote code execution by authenticated users because the _from parameter in a URL is not validated in program/actions/settings/upload.php.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unava


RoundCube Webmail Cross-site Scripting Vulnerability

Affected: Roundcube Webmail

RoundCube Webmail contains a cross-site scripting vulnerability via the animate tag in an SVG document.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-79

[Source: CISA Known Exploited Vulnerabilities Catalog]


Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability

Affected: Dell RecoverPoint for Virtual Machines (RP4VMs)

Dell RecoverPoint for Virtual Machines (RP4VMs) contains an use of hard-coded credentials vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access to the underlying operating system and root-level persistence.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for


TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability

Affected: TeamT5 ThreatSonar Anti-Ransomware

TeamT5 ThreatSonar Anti-Ransomware contains an unrestricted upload of file with dangerous type vulnerability. ThreatSonar Anti-Ransomware does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, which can be used to execute arbitrary system commands on the


Google Chromium CSS Use-After-Free Vulnerability

Affected: Google Chromium

Google Chromium CSS contains a use-after-free vulnerability that could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud servic


BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability

Affected: BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)

BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)contain an OS command injection vulnerability. Successful exploitation could allow an unauthenticated remote attacker to execute operating system commands in the context of the site user. Successful exploitation requires no authentication or user intera


Apple Multiple Buffer Overflow Vulnerability

Affected: Apple Multiple Products

Apple iOS, macOS, tvOS, watchOS, and visionOS contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow an attacker with memory write the capability to execute arbitrary code.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CW


Microsoft Configuration Manager SQL Injection Vulnerability

Affected: Microsoft Configuration Manager

Microsoft Configuration Manager contains an SQL injection vulnerability. An unauthenticated attacker could exploit this vulnerability by sending specially crafted requests to the target environment which are processed in an unsafe manner enabling the attacker to execute commands on the server and/or underlying database.

Required Action: Apply mitigations per vendor instructions, follow applic


Notepad++ Download of Code Without Integrity Check Vulnerability

Affected: Notepad++ Notepad++

Notepad++ when using the WinGUp updater, contains a download of code without integrity check vulnerability that could allow an attacker to intercept or redirect update traffic to download and execute an attacker-controlled installer. This could lead to arbitrary code execution with the privileges of the user.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 gui


SolarWinds Web Help Desk Security Control Bypass Vulnerability

Affected: SolarWinds Web Help Desk

SolarWinds Web Help Desk contains a security control bypass vulnerability that could allow an unauthenticated attacker to gain access to certain restricted functionality.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-693

[Source: CISA Known Exploit


Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability

Affected: Microsoft Windows

Microsoft MSHTML Framework contains a protection mechanism failure vulnerability that could allow an unauthorized attacker to bypass a security feature over a network.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-693

[Source: CISA Known Exploited


Microsoft Windows NULL Pointer Dereference Vulnerability

Affected: Microsoft Windows

Microsoft Windows Remote Access Connection Manager contains a NULL pointer dereference that could allow an unauthorized attacker to deny service locally.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-476

[Source: CISA Known Exploited Vulnerabilities Catalog]


Microsoft Windows Shell Protection Mechanism Failure Vulnerability

Affected: Microsoft Windows

Microsoft Windows Shell contains a protection mechanism failure vulnerability that could allow an unauthorized attacker to bypass a security feature over a network.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-693

[Source: CISA Known Exploited Vulne


Microsoft Windows Improper Privilege Management Vulnerability

Affected: Microsoft Windows

Microsoft Windows Remote Desktop Services contains an improper privilege management vulnerability that could allow an authorized attacker to elevate privileges locally.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-269

[Source: CISA Known Exploited Vulnera


Microsoft Windows Type Confusion Vulnerability

Affected: Microsoft Windows

Microsoft Desktop Windows Manager contains a type confusion vulnerability that could allow an authorized attacker to elevate privileges locally.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-843

[Source: CISA Known Exploited Vulnerabilities Catalog]


Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability

Affected: Microsoft Office

Microsoft Office Word contains a reliance on untrusted inputs in a security decision vulnerability that could allow an authorized attacker to elevate privileges locally.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-807

[Source: CI


React Native Community CLI OS Command Injection Vulnerability

Affected: React Native Community CLI

React Native Community CLI contains an OS command injection vulnerability which could allow unauthenticated network attackers to send POST requests to the Metro Development Server and run arbitrary executables via a vulnerable endpoint exposed by the server. On Windows, attackers can also execute arbitrary shell commands with fully controlled arguments.

Required Action: Apply mitigations per ven


SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability

Affected: SmarterTools SmarterMail

SmarterTools SmarterMail contains a missing authentication for critical function vulnerability in the ConnectToHub API method. This could allow the attacker to point the SmarterMail instance to a malicious HTTP server which serves the malicious OS command and could lead to command execution.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22


Sangoma FreePBX OS Command Injection Vulnerability

Affected: Sangoma FreePBX

Sangoma FreePBX Endpoint Manager contains an OS command injection vulnerability that could allow for a post-authentication command injection by an authenticated known user via the testconnection -> check_ssh_connect() function. An attacker can leverage this vulnerability to potentially obtain remote access to the system as an asterisk user.

Required Action: Apply mitigations per vendor instructions, follow applicabl


SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

Affected: SolarWinds Web Help Desk

SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the produ


Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability

Affected: Fortinet Multiple Products

Fortinet FortiAnalyzer, FortiManager, FortiOS, and FortiProxy contain an authentication bypass using an alternate path or channel that could allow an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication is enabled on those devices.

Required Action: Apply mitigations


SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability

Affected: SmarterTools SmarterMail

SmarterTools SmarterMail contains an unrestricted upload of file with dangerous type vulnerability that could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or disco


SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability

Affected: SmarterTools SmarterMail

SmarterTools SmarterMail contains an authentication bypass using an alternate path or channel vulnerability in the password reset API. The force-reset-password endpoint permits anonymous requests and fails to verify the existing password or a reset token when resetting system administrator accounts. This could allow an unauthenticated attacker to supply a target ad


GNU InetUtils Argument Injection Vulnerability

Affected: GNU InetUtils

GNU InetUtils contains an argument injection vulnerability in telnetd that could allow for remote authentication bypass via a "-f root" value for the USER environment variable.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-88

[Source: CISA Known Exploited Vulnerabilities Cat


Microsoft Office Security Feature Bypass Vulnerability

Affected: Microsoft Office

Microsoft Office contains a security feature bypass vulnerability in which reliance on untrusted inputs in a security decision in Microsoft Office could allow an unauthorized attacker to bypass a security feature locally. Some of the impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.

Required Action: Apply mit


Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability

Affected: Broadcom VMware vCenter Server

Broadcom VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. This could allow a malicious actor with network access to vCenter Server to send specially crafted network packets, potentially leading to remote code execution.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud


Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability

Affected: Synacor  Zimbra Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) contains a PHP remote file inclusion vulnerability that could allow for remote attackers to craft requests to the /h/rest endpoint to influence internal request dispatching, allowing inclusion of arbitrary files from the WebRoot directory.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 2


Versa Concerto Improper Authentication Vulnerability

Affected: Versa Concerto

Versa Concerto SD-WAN orchestration platform contains an improper authentication vulnerability in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The internal Actuator endpoint can be leveraged for access to heap dumps and trace logs.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue us


Vite Vitejs Improper Access Control Vulnerability

Affected: Vite Vitejs

Vite Vitejs contains an improper access control vulnerability that exposes content of non-allowed files using ?inline&import or ?raw?import. Only apps explicitly exposing the Vite dev server to the network (using --host or server.host config option) are affected.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigat


Prettier eslint-config-prettier Embedded Malicious Code Vulnerability

Affected: Prettier eslint-config-prettier

Prettier eslint-config-prettier contains an embedded malicious code vulnerability. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s):


Cisco Unified Communications Products Code Injection Vulnerability

Affected: Cisco Unified Communications Manager

Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance contain a code injection vulnerability that could allow the attacker to obtain user-level access to the un


Microsoft Windows Information Disclosure Vulnerability

Affected: Microsoft Windows

Microsoft Windows Desktop Windows Manager contains an information disclosure vulnerability that allows an authorized attacker to disclose information locally.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-200

[Source: CISA Known Exploited Vulnerabilities Catalog]


Gogs Path Traversal Vulnerability

Affected: Gogs Gogs

Gogs contains a path traversal vulnerability affecting improper Symbolic link handling in the PutContents API that could allow for code execution.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-22

[Source: CISA Known Exploited Vulnerabilities Catalog]


Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability

Affected: Hewlett Packard Enterprise (HPE) OneView

Hewlett Packard Enterprise (HPE) OneView contains a code injection vulnerability that allows a remote unauthenticated user to perform remote code execution.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-94

[Source: CISA Known


MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability

Affected: MongoDB MongoDB and MongoDB Server

MongoDB Server contains an improper handling of length parameter inconsistency vulnerability in Zlib compressed protocol headers. This vulnerability may allow a read of uninitialized heap memory by an unauthenticated client.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue us


WatchGuard Firebox Out of Bounds Write Vulnerability

Affected: WatchGuard Firebox

WatchGuard Fireware OS iked process contains an out of bounds write vulnerability in the OS iked process. This vulnerability may allow a remote unauthenticated attacker to execute arbitrary code and affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when configured with a dynamic gateway peer.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 g


ASUS Live Update Embedded Malicious Code Vulnerability

Affected: ASUS Live Update

ASUS Live Update contains an embedded malicious code vulnerability client were distributed with unauthorized modifications introduced through a supply chain compromise. The modified builds could cause devices meeting specific targeting conditions to perform unintended actions. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

Required Actio


SonicWall SMA1000 Missing Authorization Vulnerability

Affected: SonicWall SMA1000 appliance

SonicWall SMA1000 contains a missing authorization vulnerability that could allow for privilege escalation appliance management console (AMC) of affected devices.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable

CWE(s): CWE-862, CWE-250

[Source: CISA Known Exploited Vul


Cisco Multiple Products Improper Input Validation Vulnerability

Affected: Cisco Multiple Products

Cisco Secure Email Gateway, Secure Email, AsyncOS Software, and Web Manager appliances contains an improper input validation vulnerability that allows threat actors to execute arbitrary commands with root privileges on the underlying operating system of an affected appliance.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or di


Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability

Affected: Fortinet Multiple Products

Fortinet FortiOS, FortiSwitchMaster, FortiProxy, and FortiWeb contain an improper verification of cryptographic signature vulnerability that may allow an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML message. Please be aware that CVE-2025-59719 pertains to the same problem and is mentioned in the same vendor advisory. Ens


Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability

Affected: Gladinet CentreStack and Triofox

Gladinet CentreStack and TrioFox contain a hardcoded cryptographic keys vulnerability for their implementation of the AES cryptoscheme. This vulnerability degrades security for public exposed endpoints that may make use of it and may offer arbitrary local file inclusion when provided a specially crafted request without authentication.

Required Action: Apply mitigations per vendor


Apple Multiple Products Use-After-Free WebKit Vulnerability

Affected: Apple Multiple Products

Apple iOS, iPadOS, macOS, and other Apple products contain a use-after-free vulnerability in WebKit. Processing maliciously crafted web content may lead to memory corruption. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

Required Action: Apply mitigations per vendor instructions,


Google Chromium Out of Bounds Memory Access Vulnerability

Affected: Google Chromium

Google Chromium contains an out of bounds memory access vulnerability in ANGLE that could allow a remote attacker to perform out of bounds memory access via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-


OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability

Affected: OSGeo GeoServer

OSGeo GeoServer contains an improper restriction of XML external entity reference vulnerability that occurs when the application accepts XML input through a specific endpoint /geoserver/wms operation GetMap and could allow an attacker to define external entities within the XML request.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for


RARLAB WinRAR Path Traversal Vulnerability

Affected: RARLAB WinRAR

RARLAB WinRAR contains a path traversal vulnerability allowing an attacker to execute code in the context of the current user.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-22

[Source: CISA Known Exploited Vulnerabilities Catalog]


Microsoft Windows Use After Free Vulnerability

Affected: Microsoft Windows

Microsoft Windows Cloud Files Mini Filter Driver contains a use after free vulnerability that can allow an authorized attacker to elevate privileges locally.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-416

[Source: CISA Known Exploited Vulnerabilities Catalog]


Array Networks ArrayOS AG OS Command Injection Vulnerability

Affected: Array Networks  ArrayOS AG

Array Networks ArrayOS AG contains an OS command injection vulnerability that could allow an attacker to execute arbitrary commands.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-78

[Source: CISA Known Exploited Vulnerabilities Catalog]


Meta React Server Components Remote Code Execution Vulnerability

Affected: Meta React Server Components

Meta React Server Components contains a remote code execution vulnerability that could allow unauthenticated remote code execution by exploiting a flaw in how React decodes payloads sent to React Server Function endpoints. Please note CVE-2025-66478 has been rejected, but it is associated with CVE-2025- 55182.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD


Android Framework Information Disclosure Vulnerability

Affected: Android Framework

Android Framework contains an unspecified vulnerability that allows for information disclosure.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

[Source: CISA Known Exploited Vulnerabilities Catalog]


Android Framework Privilege Escalation Vulnerability

Affected: Android Framework

Android Framework contains an unspecified vulnerability that allows for privilege escalation.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

[Source: CISA Known Exploited Vulnerabilities Catalog]


Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability

Affected: Oracle Fusion Middleware

Oracle Fusion Middleware contains a missing authentication for critical function vulnerability, allowing unauthenticated remote attackers to take over Identity Manager.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-306

[Source:


Google Chromium V8 Type Confusion Vulnerability

Affected: Google Chromium V8

Google Chromium V8 contains a type confusion vulnerability that allows for heap corruption.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-843

[Source: CISA Known Exploited Vulnerabilities Catalog]


Fortinet FortiWeb OS Command Injection Vulnerability

Affected: Fortinet FortiWeb

Fortinet FortiWeb contains an OS command Injection vulnerability that may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-78

[Source: CISA


Fortinet FortiWeb Path Traversal Vulnerability

Affected: Fortinet FortiWeb

Fortinet FortiWeb contains a relative path traversal vulnerability that may allow an unauthenticated attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-23

[Source: CISA Known Exploit


Gladinet Triofox Improper Access Control Vulnerability

Affected: Gladinet Triofox

Gladinet Triofox contains an improper access control vulnerability that allows access to initial setup pages even after setup is complete.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-284

[Source: CISA Known Exploited Vulnerabilities Catalog]


Microsoft Windows Race Condition Vulnerability

Affected: Microsoft Windows

Microsoft Windows Kernel contains a race condition vulnerability that allows a local attacker with low-level privileges to escalate privileges. Successful exploitation of this vulnerability could enable the attacker to gain SYSTEM-level access.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavail


WatchGuard Firebox Out-of-Bounds Write Vulnerability

Affected: WatchGuard Firebox

WatchGuard Firebox contains an out-of-bounds write vulnerability in the OS iked process that may allow a remote unauthenticated attacker to execute arbitrary code.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-787

[Source: CISA Known Exploited Vulnerabilities Cata


Samsung Mobile Devices Out-of-Bounds Write Vulnerability

Affected: Samsung Mobile Devices

Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so. This vulnerability could allow remote attackers to execute arbitrary code.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-787

[Source: CISA Known Exploited Vulner


CWP Control Web Panel OS Command Injection Vulnerability

Affected: CWP Control Web Panel

CWP Control Web Panel (formerly CentOS Web Panel) contains an OS command Injection vulnerability that allows unauthenticated remote code execution via shell metacharacters in the t_total parameter in a filemanager changePerm request. A valid non-root username must be known.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue u


Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability

Affected: Gladinet CentreStack and Triofox

Gladinet CentreStack and Triofox contains a files or directories accessible to external parties vulnerability that allows unintended disclosure of system files.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CW


Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability

Affected: Broadcom VMware Aria Operations and VMware Tools

Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the


XWiki Platform Eval Injection Vulnerability

Affected: XWiki Platform

XWiki Platform contains an eval injection vulnerability that could allow any guest to perform arbitrary remote code execution through a request to SolrSearch.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-95

[Source: CISA Known Exploited Vulnerabilities Catalog]


Dassault Systèmes DELMIA Apriso Code Injection Vulnerability

Affected: Dassault Systèmes DELMIA Apriso

Dassault Systèmes DELMIA Apriso contains a code injection vulnerability that could allow an attacker to execute arbitrary code.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-94

[Source: CISA Known Exploited Vulnerabilities Catalog]


Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability

Affected: Dassault Systèmes DELMIA Apriso

Dassault Systèmes DELMIA Apriso contains a missing authorization vulnerability that could allow an attacker to gain privileged access to the application.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-862

[Source: CISA Known Exploited Vu


Adobe Commerce and Magento Improper Input Validation Vulnerability

Affected: Adobe Commerce and Magento

Adobe Commerce and Magento Open Source contain an improper input validation vulnerability that could allow an attacker to take over customer accounts through the Commerce REST API.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-20

[Source: CIS


Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability

Affected: Microsoft Windows

Microsoft Windows Server Update Service (WSUS) contains a deserialization of untrusted data vulnerability that allows for remote code execution.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-502

[Source: CISA Known Exploite


Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability

Affected: Motex LANSCOPE Endpoint Manager

Motex LANSCOPE Endpoint Manager contains an improper verification of source of a communication channel vulnerability allowing an attacker to execute arbitrary code by sending specially crafted packets.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the produ


Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability

Affected: Kentico Xperience CMS

Kentico Xperience CMS contains an authentication bypass using an alternate path or channel vulnerability that could allow an attacker to control administrative objects.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-288

[S


Microsoft Windows SMB Client Improper Access Control Vulnerability

Affected: Microsoft Windows

Microsoft Windows SMB Client contains an improper access control vulnerability that could allow for privilege escalation. An attacker could execute a specially crafted malicious script to coerce the victim machine to connect back to the attack system using SMB and authenticate.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or dis


Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability

Affected: Oracle E-Business Suite

Oracle E-Business Suite contains a server-side request forgery (SSRF) vulnerability in the Runtime component of Oracle Configurator. This vulnerability is remotely exploitable without authentication.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Ransom


Adobe Experience Manager Forms Code Execution Vulnerability

Affected: Adobe Experience Manager (AEM) Forms

Adobe Experience Manager Forms in JEE contains an unspecified vulnerability that allows for arbitrary code execution.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

[Source: CISA Known Exploited Vulnerabilities Catalog]


IGEL OS Use of a Key Past its Expiration Date Vulnerability

Affected: IGEL IGEL OS

IGEL OS contains a use of a key past its expiration date vulnerability that allows for Secure Boot bypass. The igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the


Microsoft Windows Untrusted Pointer Dereference Vulnerability

Affected: Microsoft Windows

Microsoft Windows Agere Modem Driver contains an untrusted pointer dereference vulnerability that allows for privilege escalation. An attacker who successfully exploited this vulnerability could gain administrator privileges.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable


Microsoft Windows Improper Access Control Vulnerability

Affected: Microsoft Windows

Microsoft Windows contains an improper access control vulnerability in Windows Remote Access Connection Manager which could allow an authorized attacker to elevate privileges locally.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-284

[Source: CISA Known Exploite


Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

Affected: Synacor Zimbra Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that exists in the Classic Web Client due to insufficient sanitization of HTML content in ICS files. When a user views an e-mail message containing a malicious ICS entry, its embedded JavaScript executes via an ontoggle event inside a tag. This allows an attacker to run arbitrary Jav


Oracle E-Business Suite Unspecified Vulnerability

Affected: Oracle E-Business Suite

Oracle E-Business Suite contains an unspecified vulnerability in the BI Publisher Integration component. The vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks can result in takeover of Oracle Concurrent Processing.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud ser


Samsung Mobile Devices Out-of-Bounds Write Vulnerability

Affected: Samsung Mobile Devices

Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so which allows remote attackers to execute arbitrary code.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-787

[Source: CISA Known Exploited Vulnerabilities Catalog]


Smartbedded Meteobridge Command Injection Vulnerability

Affected: Smartbedded Meteobridge

Smartbedded Meteobridge contains a command injection vulnerability that could allow remote unauthenticated attackers to gain arbitrary command execution with elevated privileges (root) on affected devices.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-306,


Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability

Affected: Sudo Sudo

Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to leverage sudo’s -R (--chroot) option to run arbitrary commands as root, even if they are not listed in the sudoers file.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the


Libraesva Email Security Gateway Command Injection Vulnerability

Affected: Libraesva Email Security Gateway

Libraesva Email Security Gateway (ESG) contains a command injection vulnerability which allows command injection via a compressed e-mail attachment.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-77

[Source: CISA Known Exploited Vulnerabil


Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability

Affected: Fortra GoAnywhere MFT

Fortra GoAnywhere MFT contains a deserialization of untrusted data vulnerability allows an actor with a validly forged license response signature to deserialize an arbitrary actor-controlled object, possibly leading to command injection.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mit


Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability

Affected: Cisco IOS and IOS XE

Cisco IOS and IOS XE contains a stack-based buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) subsystem that could allow for denial of service or remote code execution. A successful exploit could allow a low-privileged attacker to cause the affected system to reload, resulting in a DoS condition, or allow a high-privileged attacker to execute


Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability

Affected: Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense

Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a missing authorization vulnerability. This vulnerability could be chained with CVE-2025-20333.

Required Action: The KEV due date refers to


Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability

Affected: Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense

Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a buffer overflow vulnerability that allows for remote code execution. This vulnerability could be chained with CVE-2025-20362.

Required Action: T


Google Chromium V8 Type Confusion Vulnerability

Affected: Google Chromium V8

Google Chromium contains a type confusion vulnerability in the V8 JavaScript and WebAssembly engine.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-843

[Source: CISA Known Exploited Vulnerabilities Catalog]


Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability

Affected: Dassault Systèmes DELMIA Apriso

Dassault Systèmes DELMIA Apriso contains a deserialization of untrusted data vulnerability that could lead to a remote code execution.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-502

[Source: CISA Known Exploited Vulnerabi


Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability

Affected: Linux Kernel

Linux kernel contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that has a high impact on confidentiality, integrity, and availability.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-367

[Source: CISA Known Exploited Vulner


Android Runtime Use-After-Free Vulnerability

Affected: Android Runtime

Android Runtime contains a use-after-free vulnerability potentially allowing a chrome sandbox escape leading to local privilege escalation.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

[Source: CISA Known Exploited Vulnerabilities Catalog]


Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability

Affected: Sitecore Multiple Products

Sitecore Experience Manager (XM), Experience Platform (XP), Experience Commerce (XC), and Managed Cloud contain a deserialization of untrusted data vulnerability involving the use of default machine keys. This flaw allows attackers to exploit exposed ASP.NET machine keys to achieve remote code execution.

Required Action: Apply mitigations per vendor instructions, follow applicable


TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability

Affected: TP-Link Multiple Routers

TP-Link Archer C7(EU) and TL-WR841N/ND(MS) contain an OS command injection vulnerability that exists in the Parental Control page. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontin


Meta Platforms WhatsApp Incorrect Authorization Vulnerability

Affected: Meta Platforms WhatsApp

Meta Platforms WhatsApp contains an incorrect authorization vulnerability due to an incomplete authorization of linked device synchronization messages. This vulnerability could allow an unrelated user to trigger processing of content from an arbitrary URL on a target’s device.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or dis


Sangoma FreePBX Authentication Bypass Vulnerability

Affected: Sangoma FreePBX

Sangoma FreePBX contains an authentication bypass vulnerability due to insufficiently sanitized user-supplied data allows unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailab


Citrix NetScaler Memory Overflow Vulnerability

Affected: Citrix NetScaler

Citrix NetScaler ADC and NetScaler Gateway contain a memory overflow vulnerability that could allow for remote code execution and/or denial of service.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-119

[Source: CISA Known Exploited Vulnerabilities Catalog]


Git Link Following Vulnerability

Affected: Git Git

Git contains a link following vulnerability that stems from Git’s inconsistent handling of carriage return characters in configuration files.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-59, CWE-436

[Source: CISA Known Exploited Vulnerabilities Catalog]


Citrix Session Recording Improper Privilege Management Vulnerability

Affected: Citrix Session Recording

Citrix Session Recording contains an improper privilege management vulnerability that could allow for privilege escalation to NetworkService Account access. An attacker must be an authenticated user in the same Windows Active Directory domain as the session recording server domain.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud ser


Citrix Session Recording Deserialization of Untrusted Data Vulnerability

Affected: Citrix Session Recording

Citrix Session Recording contains a deserialization of untrusted data vulnerability that allows limited remote code execution with privilege of a NetworkService Account access. Attacker must be an authenticated user on the same intranet as the session recording server.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or


Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

Affected: Apple iOS, iPadOS, and macOS

Apple iOS, iPadOS, and macOS contain an out-of-bounds write vulnerability in the Image I/O framework.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-787

[Source: CISA Known Exploited Vulnerabilities Catalog]


Trend Micro Apex One OS Command Injection Vulnerability

Affected: Trend Micro Apex One

Trend Micro Apex One Management Console (on-premise) contains an OS command injection vulnerability that could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.


N-able N-Central Command Injection Vulnerability

Affected: N-able N-Central

N-able N-Central contains a command injection vulnerability via improper sanitization of user input.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

[Source: CISA Known Exploited Vulnerabilities Catalog]


N-able N-Central Insecure Deserialization Vulnerability

Affected: N-able N-Central

N-able N-Central contains an insecure deserialization vulnerability that could lead to command execution.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

[Source: CISA Known Exploited Vulnerabilities Catalog]


RARLAB WinRAR Path Traversal Vulnerability

Affected: RARLAB WinRAR

RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This vulnerability could allow an attacker to execute arbitrary code by crafting malicious archive files.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-35

[Source: CISA Known Exploited


Cisco Identity Services Engine Injection Vulnerability

Affected: Cisco Identity Services Engine

Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient validation of user-supplied input allowing an attacker to exploit this vulnerability by submitting a crafted API request. Successful exploitation could allow an attacker to perform remote code execution and obtaining root privileges on an affected device.

Required


SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability

Affected: SysAid SysAid On-Prem

SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Checkin processing functionality, allowing for administrator account takeover and file read primitives.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavai


SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability

Affected: SysAid SysAid On-Prem

SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are una


Google Chromium ANGLE and GPU Improper Input Validation Vulnerability

Affected: Google Chromium

Google Chromium contains an improper input validation vulnerability in ANGLE and GPU. This vulnerability could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Required Action: Apply mitigations per vendor instr


 CrushFTP Unprotected Alternate Channel Vulnerability

Affected: CrushFTP CrushFTP

CrushFTP contains an unprotected alternate channel vulnerability. When the DMZ proxy feature is not used, mishandles AS2 validation and consequently allows remote attackers to obtain admin access via HTTPS.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-420

[Source


Microsoft SharePoint Code Injection Vulnerability

Affected: Microsoft SharePoint

Microsoft SharePoint contains a code injection vulnerability that could allow an authorized attacker to execute code over a network. This vulnerability could be chained with CVE-2025-49706. CVE-2025-53770 is a patch bypass for CVE-2025-49704, and the updates for CVE-2025-53770 include more robust protection than those for CVE-2025-49704.

Required Action: Disconnect public-facing versions of SharePoint Server that


Microsoft SharePoint Improper Authentication Vulnerability

Affected: Microsoft SharePoint

Microsoft SharePoint contains an improper authentication vulnerability that allows an authorized attacker to perform spoofing over a network. Successfully exploitation could allow an attacker to view sensitive information and make some changes to disclosed information. This vulnerability could be chained with CVE-2025-49704. CVE-2025-53771 is a patch bypass for CVE-2025-49706, and the updates for CVE-2025


Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Affected: Microsoft SharePoint

Microsoft SharePoint Server on-premises contains a deserialization of untrusted data vulnerability that could allow an unauthorized attacker to execute code over a network. This vulnerability could be chained with CVE-2025-53771. CVE-2025-53770 is a patch bypass for CVE-2025-49704, and the updates for CVE-2025-53770 include more robust protection than those for CVE-2025-49704.

Required Action:


Fortinet FortiWeb SQL Injection Vulnerability

Affected: Fortinet FortiWeb

Fortinet FortiWeb contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized SQL code or commands via crafted HTTP or HTTPs requests.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-89

[Source: CISA Known Exploited Vulnerabilit


Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability

Affected: Wing FTP Server Wing FTP Server

Wing FTP Server contains an improper neutralization of null byte or NUL character vulnerability that can allow injection of arbitrary Lua code into user session files. This can be used to execute arbitrary system commands with the privileges of the FTP service (root or SYSTEM by default).

Required Action: Apply mitigations per vendor instructions, follow applicable BOD


Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability

Affected: Citrix NetScaler ADC and Gateway

Citrix NetScaler ADC and Gateway contain an out-of-bounds read vulnerability due to insufficient input validation. This vulnerability can lead to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud s


Google Chromium V8 Type Confusion Vulnerability

Affected: Google Chromium V8

Google Chromium V8 contains a type confusion vulnerability that could allow a remote attacker to perform arbitrary read/write via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or


TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability

Affected: TeleMessage TM SGNL

TeleMessage TM SGNL contains an exposure of core dump file to an unauthorized control sphere Vulnerability. This vulnerability is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password previously sent over HTTP would be included in this dump.

Required Action: Apply mitigations per vendor instructions, follow appli


TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability

Affected: TeleMessage TM SGNL

TeleMessage TM SGNL contains an initialization of a resource with an insecure default vulnerability. This vulnerability relies on how the Spring Boot Actuator is configured with an exposed heap dump endpoint at a /heapdump URI.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product


Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability

Affected: Citrix NetScaler ADC and Gateway

Citrix NetScaler ADC and Gateway contain a buffer overflow vulnerability leading to unintended control flow and Denial of Service. NetScaler must be configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the produ


 D-Link DIR-859 Router Path Traversal Vulnerability

Affected: D-Link DIR-859 Router

D-Link DIR-859 routers contain a path traversal vulnerability in the file /hedwig.cgi of the component HTTP POST Request Handler. Manipulation of the argument service with the input ../../../../htdocs/webinc/getcfg/DHCPS6.BRIDGE-1.xml allows for the leakage of session data potentially enabling privilege escalation and unauthorized control of the device. This vulnerability affects legacy D-Link products. All ass


AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability

Affected: AMI MegaRAC SPx

AMI MegaRAC SPx contains an authentication bypass by spoofing vulnerability in the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable


Apple Multiple Products Unspecified Vulnerability

Affected: Apple Multiple Products

Apple iOS, iPadOS, macOS, watchOS, and visionOS, contain an unspecified vulnerability when processing a maliciously crafted photo or video shared via an iCloud Link.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

[Source: CISA Known Exploited Vulnerabilities Catalog]


 Microsoft Windows External Control of File Name or Path Vulnerability

Affected: Microsoft Windows

Microsoft Windows contains an external control of file name or path vulnerability that could allow an attacker to execute code from a remote WebDAV location specified by the WorkingDirectory attribute of Internet Shortcut files.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are


Wazuh Server Deserialization of Untrusted Data Vulnerability

Affected: Wazuh Wazuh Server

Wazuh contains a deserialization of untrusted data vulnerability that allows for remote code execution on Wazuh servers.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-502

[Source: CISA Known Exploited Vulnerabilities Catalog]


RoundCube Webmail Cross-Site Scripting Vulnerability

Affected: Roundcube Webmail

RoundCube Webmail contains a cross-site scripting vulnerability. This vulnerability could allow a remote attacker to steal and send emails of a victim via a crafted e-mail message that abuses a Desanitization issue in message_body() in program/actions/mail/show.php.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the produc


Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability

Affected: Erlang Erlang/OTP

Erlang Erlang/OTP SSH server contains a missing authentication for critical function vulnerability. This could allow an attacker to execute arbitrary commands without valid credentials, potentially leading to unauthenticated remote code execution (RCE). By exploiting a flaw in how SSH protocol messages are handled, a malicious actor could gain unauthorized access to affected syst


Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

Affected: Google Chromium V8

Google Chromium V8 contains an out-of-bounds read and write vulnerability that could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 2


Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

Affected: Qualcomm Multiple Chipsets

Multiple Qualcomm chipsets contain an incorrect authorization vulnerability. This vulnerability allows for memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations ar


Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Affected: Qualcomm Multiple Chipsets

Multiple Qualcomm chipsets contain a use-after-free vulnerability. This vulnerability allows for memory corruption while rendering graphics using Adreno GPU drivers in Chrome.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-416

[Source: CISA Known Exploit


ConnectWise ScreenConnect Improper Authentication Vulnerability

Affected: ConnectWise ScreenConnect

ConnectWise ScreenConnect contains an improper authentication vulnerability. This vulnerability could allow a ViewState code injection attack, which could allow remote code execution if machine keys are compromised.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable


Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability

Affected: Craft CMS Craft CMS

Craft CMS contains an external control of assumed-immutable web parameter vulnerability. This vulnerability could allow an unauthenticated client to introduce arbitrary values, such as PHP code, to a known local file location on the server. This vulnerability could be chained with CVE-2024-58136 as represented by CVE-2025-32432.

Required Action: Apply mitigations per vendor instructions,


Craft CMS Code Injection Vulnerability

Affected: Craft CMS Craft CMS

Craft CMS contains a code injection vulnerability. Users with affected versions are vulnerable to remote code execution if their php.ini configuration has `register_argc_argv` enabled.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-94

[Source: CISA Known Exploited Vulnerabiliti


Samsung MagicINFO 9 Server Path Traversal Vulnerability

Affected: Samsung MagicINFO 9 Server

Samsung MagicINFO 9 Server contains a path traversal vulnerability that allows an attacker to write arbitrary file as system authority.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-22

[Source: CISA Known Exploited Vulnerabilities Catalog]


Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

Affected: Synacor Zimbra Collaboration Suite (ZCS)

Zimbra Collaboration contains a cross-site scripting (XSS) vulnerability in the CalendarInvite feature of the Zimbra webmail classic user interface. An attacker can exploit this vulnerability via an email message containing a crafted calendar header, leading to the execution of arbitrary JavaScript code.

Required Action: Apply mitigations per vendor instructions


Srimax Output Messenger Directory Traversal Vulnerability

Affected: Srimax Output Messenger

Srimax Output Messenger contains a directory traversal vulnerability that allows an attacker to access sensitive files outside the intended directory, potentially leading to configuration leakage or arbitrary file access.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.


MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability

Affected: MDaemon Email Server

MDaemon Email Server contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to load arbitrary JavaScript code via an HTML e-mail message.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-79

[Source: CISA Known Exploited Vulnerabi


Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

Affected: Ivanti Endpoint Manager Mobile (EPMM)

Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability in the API component that allows an authenticated attacker to remotely execute arbitrary code via crafted API requests. This vulnerability results from an insecure implementation of the Hibernate Validator open-source library, as represented by CVE-2025-35036.

Required Action: Apply mitigations per vend


Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability

Affected: Ivanti Endpoint Manager Mobile (EPMM)

Ivanti Endpoint Manager Mobile (EPMM) contains an authentication bypass vulnerability in the API component that allows an attacker to access protected resources without proper credentials via crafted API requests. This vulnerability results from an insecure implementation of the Spring Framework open-source library.

Required Action: Apply mitigations per vendor instruction


SAP NetWeaver Deserialization Vulnerability

Affected: SAP NetWeaver

SAP NetWeaver Visual Composer Metadata Uploader contains a deserialization vulnerability that allows a privileged attacker to compromise the confidentiality, integrity, and availability of the host system by deserializing untrusted or malicious content.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unava


DrayTek Vigor Routers OS Command Injection Vulnerability

Affected: DrayTek Vigor Routers

DrayTek Vigor2960, Vigor300B, and Vigor3900 routers contain an OS command injection vulnerability due to an unknown function of the file /cgi-bin/mainfunction.cgi/apmcfgupload of the component web management interface.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s


Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability

Affected: Fortinet Multiple Products

Fortinet FortiFone, FortiVoice, FortiNDR and FortiMail contain a stack-based overflow vulnerability that may allow a remote unauthenticated attacker to execute arbitrary code or commands via crafted HTTP requests.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavail


Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

Affected: Microsoft Windows

Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to escalate privileges to administrator.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-416

[Source: CI


Microsoft Windows Scripting Engine Type Confusion Vulnerability

Affected: Microsoft Windows

Microsoft Windows Scripting Engine contains a type confusion vulnerability that allows an unauthorized attacker to execute code over a network via a specially crafted URL.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-843

[Source: CISA Known Exploited Vu


Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

Affected: Microsoft Windows

Microsoft Windows Common Log File System (CLFS) Driver contains a heap-based buffer overflow vulnerability that allows an authorized attacker to elevate privileges locally.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-122


Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

Affected: Microsoft Windows

Microsoft Windows Common Log File System (CLFS) Driver contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-416

[Source: CISA Known Exp


Microsoft Windows DWM Core Library Use-After-Free Vulnerability

Affected: Microsoft Windows

Microsoft Windows DWM Core Library contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-416

[Source: CISA Known Exploited Vulnerabilities Catalog]


TeleMessage TM SGNL Hidden Functionality Vulnerability

Affected: TeleMessage TM SGNL

TeleMessage TM SGNL contains a hidden functionality vulnerability in which the archiving backend holds cleartext copies of messages from TM SGNL application users.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-912

[Source: CISA Known Exploited Vulnerabilities C


GeoVision Devices OS Command Injection Vulnerability

Affected: GeoVision Multiple Devices

Multiple GeoVision devices contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to inject and execute arbitrary system commands. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud service


FreeType Out-of-Bounds Write Vulnerability

Affected: FreeType FreeType

FreeType contains an out-of-bounds write vulnerability when attempting to parse font subglyph structures related to TrueType GX and variable font files that may allow for arbitrary code execution.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-787

[Source: CISA Known Exploite


Langflow Missing Authentication Vulnerability

Affected: Langflow Langflow

Langflow contains a missing authentication vulnerability in the /api/v1/validate/code endpoint that allows a remote, unauthenticated attacker to execute arbitrary code via crafted HTTP requests.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-306

[Source: CISA Known Exploit


Commvault Command Center Path Traversal Vulnerability

Affected: Commvault Command Center

Commvault Command Center contains a path traversal vulnerability that allows a remote, unauthenticated attacker to execute arbitrary code.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-22

[Source: CISA Known Exploited Vulnerabilities Catalog]


Yiiframework Yii Improper Protection of Alternate Path Vulnerability

Affected: Yiiframework Yii

Yii Framework contains an improper protection of alternate path vulnerability that may allow a remote attacker to execute arbitrary code. This vulnerability could affect other products that implement Yii, including—but not limited to—Craft CMS, as represented by CVE-2025-32432.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or di


Apache HTTP Server Improper Escaping of Output Vulnerability

Affected: Apache HTTP Server

Apache HTTP Server contains an improper escaping of output vulnerability in mod_rewrite that allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for


SAP NetWeaver Unrestricted File Upload Vulnerability

Affected: SAP NetWeaver

SAP NetWeaver Visual Composer Metadata Uploader contains an unrestricted file upload vulnerability that allows an unauthenticated agent to upload potentially malicious executable binaries.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Ransomware: Known

CWE(s): CWE-434

[Source: CI


Broadcom Brocade Fabric OS Code Injection Vulnerability

Affected: Broadcom Brocade Fabric OS

Broadcom Brocade Fabric OS contains a code injection vulnerability that allows a local user with administrative privileges to execute arbitrary code with full root privileges.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-94

[Source: CISA Known Exploite


Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability

Affected: Qualitia Active! Mail

Qualitia Active! Mail contains a stack-based buffer overflow vulnerability that allows a remote, unauthenticated attacker to execute arbitrary or trigger a denial-of-service via a specially crafted request.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CW


Commvault Web Server Unspecified Vulnerability

Affected: Commvault Web Server

Commvault Web Server contains an unspecified vulnerability that allows a remote, authenticated attacker to create and execute webshells.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

[Source: CISA Known Exploited Vulnerabilities Catalog]


Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability

Affected: Microsoft Windows

Microsoft Windows NTLM contains an external control of file name or path vulnerability that allows an unauthorized attacker to perform spoofing over a network.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-73

[Source: CISA Known Exploited Vulnerabilities C


Apple Multiple Products Arbitrary Read and Write Vulnerability

Affected: Apple Multiple Products

Apple iOS, iPadOS, macOS, and other Apple products contain an arbitrary read and write vulnerability that allows an attacker to bypass Pointer Authentication.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

[Source: CISA Known Exploited Vulnerabilities Catalog]


Apple Multiple Products Memory Corruption Vulnerability

Affected: Apple Multiple Products

Apple iOS, iPadOS, macOS, and other Apple products contain a memory corruption vulnerability that allows for code execution when processing an audio stream in a maliciously crafted media file.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

[Source: CISA Known Exploited


Linux Kernel Out-of-Bounds Read Vulnerability

Affected: Linux Kernel

Linux Kernel contains an out-of-bounds read vulnerability in the USB-audio driver that allows a local, privileged attacker to obtain potentially sensitive information.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-125

[Source: CISA Known Exploited Vulnerabilities Catalog]


Linux Kernel Out-of-Bounds Access Vulnerability

Affected: Linux Kernel

Linux Kernel contains an out-of-bounds access vulnerability in the USB-audio driver that allows an attacker with physical access to the system to use a malicious USB device to potentially manipulate system memory, escalate privileges, or execute arbitrary code.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigation


Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

Affected: Microsoft Windows

Microsoft Windows Common Log File System (CLFS) Driver contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Ransomware: Known

CWE(s): CWE-416

[Sou


Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability

Affected: Gladinet CentreStack

Gladinet CentreStack and Triofox contains a use of hard-coded cryptographic key vulnerability in the way that the application manages keys used for ViewState integrity verification. Successful exploitation allows an attacker to forge ViewState payloads for server-side deserialization, allowing for remote code execution.

Required Action: Apply mitigations per vendor instructions, f


CrushFTP Authentication Bypass Vulnerability

Affected: CrushFTP CrushFTP

CrushFTP contains an authentication bypass vulnerability in the HTTP authorization header that allows a remote unauthenticated attacker to authenticate to any known or guessable user account (e.g., crushadmin), potentially leading to a full compromise.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are


Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

Affected: Ivanti Connect Secure, Policy Secure, and ZTA Gateways

Ivanti Connect Secure, Policy Secure, and ZTA Gateways contains a stack-based buffer overflow vulnerability that allows a remote unauthenticated attacker to achieve remote code execution.

Required Action: Apply mitigations as set forth in the CISA instructions linked below.

Ransomware: Known

CWE(s): CWE-121

[Source: CISA Known Ex


Apache Tomcat Path Equivalence Vulnerability

Affected: Apache Tomcat

Apache Tomcat contains a path equivalence vulnerability that allows a remote attacker to execute code, disclose information, or inject malicious content via a partial PUT request.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-44, CWE-502

[Source: CISA Known Exploited Vulnerabi


Cisco Smart Licensing Utility Static Credential Vulnerability

Affected: Cisco Smart Licensing Utility

Cisco Smart Licensing Utility contains a static credential vulnerability that allows an unauthenticated, remote attacker to log in to an affected system and gain administrative credentials.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CWE(s): CWE-912

[Sou


Google Chromium Mojo Sandbox Escape Vulnerability

Affected: Google Chromium Mojo

Google Chromium Mojo on Windows contains a sandbox escape vulnerability caused by a logic error, which results from an incorrect handle being provided in unspecified circumstances. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-