Skip to content
OpenAdvisories

Archive

15 September 2025

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-59359 Public exploit

    OS command injection in Chaos Mesh via the cleanTcs mutation

    The cleanTcs mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this allows unauthenticated in-cluster attackers to perform remote code execution across the cluster.

  • Critical 9.8
    CVE-2025-46408 Public exploit

    An issue was discovered in the methods push.lite.avtech.com.AvtechLib.GetHttpsResponse and push.lite.avtech.com.Push_Ht…

  • Critical 9.8
    CVE-2025-57174 Public exploit

    An issue was discovered in Siklu Communications Etherhaul 8010TX and 1200FX devices, Firmware 7.4.0 through 10.7.3 and …