Week 7, 2025

10–16 February 2025

New CVEs: 959
Critical: 72
High: 385
Newly exploited: 7
Advisories: 558
Malicious pkgs: 133

Newly exploited 7

Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.

Critical 9.1
CVE-2024-57727 KEV Feb 13, 2025 · ransomware SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to d…
EPSS 97%
Medium 6.8
CVE-2024-41710 KEV Feb 12, 2025 A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 (R6.4.0.136) could a…
EPSS 42%
Medium 6.1
CVE-2025-24200 KEV Feb 12, 2025 An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 1…
Apple · iOS and iPadOS · iPadOS

EPSS 4.5%
High 8.8
CVE-2024-40891 KEV Feb 11, 2025 **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmwar…
Zyxel · VMG4325-B10A firmware

EPSS 23%
High 8.8
CVE-2024-40890 KEV Feb 11, 2025 **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI program of the legacy DSL CPE Zyxel VMG4325-B10A firmware versio…
Zyxel · VMG4325-B10A firmware

EPSS 21%
High 7.8
CVE-2025-21418 KEV Feb 11, 2025 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 2.1%
High 7.1
CVE-2025-21391 KEV Feb 11, 2025 Windows Storage Elevation of Privilege Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 2.3%

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

Critical 9.9
CVE-2025-24016 Remote code execution in Wazuh server
wazuh · wazuh

EPSS 94%
Critical 9.8
CVE-2025-1044 Logsign Unified SecOps Platform Authentication Bypass Vulnerability
Logsign · Unified SecOps Platform

EPSS 75%
Critical 9.1
CVE-2024-47908 OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote…
ivanti · Cloud Services Application

EPSS 22%
Critical 9.1
CVE-2025-24434 Adobe Commerce | Incorrect Authorization (CWE-863)
Adobe · Adobe Commerce

EPSS 17%
Critical 9.8
CVE-2025-1302 JSONPath Plus allows Remote Code Execution
EPSS 10%
Critical 9.8
CVE-2022-3180 WPGateway <= 3.5 - Unauthenticated Privilege Escalation
Jack Hopman · WPGateway

EPSS 9.2%
Critical 10.0
CVE-2025-24865 mySCADA myPRO Manager Missing Authentication for Critical Function
mySCADA · myPRO Manager

EPSS 7.2%
Critical 9.9
CVE-2025-22467 A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6 allows a remote authenticated attacker to achieve remote code execution.
ivanti · Connect Secure

EPSS 4.7%
Critical 9.8
CVE-2024-10763 Campress <= 1.35 - Unauthenticated Local File Inclusion
ApusTheme · Campress

EPSS 3.7%
Critical 9.5
CVE-2024-52577 Apache Ignite: Possible RCE when deserializing incoming messages by the server node
Apache Software Foundation · Apache Ignite

EPSS 3.1%
Critical 9.1
CVE-2024-10644 Code injection in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before version 22.7R1.3 allows a remote authenticated attacker with ad…
ivanti · Connect Secure · Policy Secure

EPSS 2.8%
Critical 9.8
CVE-2025-0896 Orthanc Server Missing Authentication for Critical Function
Orthanc · Orthanc server

EPSS 2.5%
Critical 10.0
CVE-2025-26793 The Web GUI configuration panel of Hirsch (formerly Identiv and Viscount) Enterphone MESH through 2024 ships with default credentials (username freedom, passwo…
Hirsch · Enterphone MESH

EPSS 2.4%
Critical 9.1
CVE-2022-31631 PDO::quote() may return unquoted string
PHP Group · PHP

EPSS 2.2%
Critical 9.8
CVE-2025-25067 mySCADA myPRO Manager OS Command Injection
mySCADA · myPRO Manager

EPSS 1.7%

All 72 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

Medium 5.9
CVE-2025-0108 PAN-OS: Authentication Bypass in the Management Web Interface
Palo Alto Networks · PAN-OS · Prisma Access · Cloud NGFW

EPSS 98%
High 8.1
CVE-2025-1094 PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation
EPSS 90%
High 7.3
CVE-2025-1338 NUUO Camera handle_config.php print_file command injection
NUUO · Camera

EPSS 51%
Medium 6.5
CVE-2025-21377 NTLM Hash Disclosure Spoofing Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 40%
High 8.0
CVE-2025-21400 Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft · Microsoft SharePoint Server 2019 · Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server Subscription Edition

EPSS 34%
Medium 6.9
CVE-2024-27781 An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandbo…
Fortinet · FortiSandbox

EPSS 28%
High 7.2
CVE-2024-13059 Path Traversal in mintplex-labs/anything-llm
Mintplex-Labs · mintplex-labs/anything-llm

EPSS 24%
High 8.8
CVE-2025-1340 TOTOLINK X18 cstecgi.cgi setPasswordCfg stack-based overflow
Toto Link · X18

EPSS 17%

Advisories

SUSE-SU-2025:0499-1 Security update for the Linux Kernel 257 CVEs
SUSE-SU-2025:0557-1 Security update for the Linux Kernel 256 CVEs
SUSE-SU-2025:0428-1 Security update for the Linux Kernel 248 CVEs
SUSE-SU-2025:0556-1 Security update for the Linux Kernel 94 CVEs
SSA-769027 SSA-769027: Multiple Vulnerabilities fixed in SCALANCE W700 IEEE 802.11ax devices before V3.0.0 72 CVEs
ICSA-25-044-09 Siemens SCALANCE W700 IEEE 802.11ax 72 CVEs
DLA-4053-1 freerdp2 - security update 32 CVEs
ICSA-25-044-06 Siemens RUGGEDCOM APE1808 30 CVEs
SSA-770770 SSA-770770: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.7 on RUGGEDCOM APE1808 Devices 30 CVEs
SUSE-SU-2025:0555-1 Security update for the Linux Kernel 28 CVEs