Week 8, 2025

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2025-24893 Remote code execution as guest via SolrSearchMacros request in xwiki

  xwiki · xwiki-platform

  EPSS 100%
• Critical 9.8
  CVE-2024-57045 A vulnerability in the D-Link DIR-859 router with firmware version A3 1.05 and earlier permits unauthorized individuals to bypass the authentication. An attack…
  EPSS 32%
• Critical 9.3
  CVE-2025-0868 Remote Code Execution in DocsGPT

  arc53 · DocsGPT

  EPSS 17%
• Critical 9.8
  CVE-2024-54756 A remote code execution (RCE) vulnerability in the ZScript function of ZDoom Team GZDoom v4.13.1 allows attackers to execute arbitrary code via supplying a cra…
  EPSS 3.1%
• Critical 10.0
  CVE-2025-26613 OS Command Injection endpoint 'gerenciar_backup.php' parameter 'file' (RCE) in WeGIA

  LabRedesCefetRJ · WeGIA

  EPSS 2.5%
• Critical 9.3
  CVE-2025-1023 SQL Injection in ChurchCRM newCountName Parameter via EditEventTypes.php

  ChurchCRM · ChurchCRM

  EPSS 2.5%
• Critical 9.1
  CVE-2024-38657 External control of a file name in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before version 22.7R1.3 allows a remote authenticated…

  ivanti · Connect Secure · Policy Secure

  EPSS 1.6%
• Critical 9.9
  CVE-2025-1265 Elseta Vinci Protocol Analyzer OS Command Injection

  Elseta · Vinci Protocol Analyzer

  EPSS 1.4%
• Critical 9.8
  CVE-2021-46686 Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in acmailer CGI ver.4.0.3 and earlier and acmailer DB v…

  Extra Innovation · acmailer CGI · acmailer DB

  EPSS 1.4%
• Critical 9.8
  CVE-2024-13725 Keap Official Opt-in Forms <= 2.0.1 - Unauthenticated Limited Local File Inclusion

  infusionsoft · Keap Official Opt-in Forms

  EPSS 1.4%
• Critical 9.8
  CVE-2025-25675 Tenda AC10 V1.0 V15.03.06.23 has a command injection vulnerablility located in the formexeCommand function. The str variable receives the cmdinput parameter fr…
  EPSS 1.3%
• Critical 9.8
  CVE-2025-26014 A Remote Code Execution (RCE) vulnerability in Loggrove v.1.0 allows a remote attacker to execute arbitrary code via the path parameter.
  EPSS 1.1%
• Critical 10.0
  CVE-2025-22654 WordPress Simplified Plugin Plugin <= 1.0.6 - Arbitrary File Upload vulnerability

  kodeshpa · Simplified

• Critical 9.2
  CVE-2025-20059 PingAM Java Policy Agent path traversal

  Ping Identity · PingAM Java Policy Agent

• Critical 9.8
  CVE-2024-57401 SQL Injection vulnerability in Uniclare Student portal v.2 and before allows a remote attacker to execute arbitrary code via the Forgot Password function.

All 57 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 7.5
  CVE-2025-26794 Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection. (Resolving SQL injection requires an update to 4.99.1 …

  Exim · Exim

  EPSS 78%
• Medium 6.8
  CVE-2019-8900 A vulnerability in the SecureROM of some Apple devices can be exploited by an unauthenticated local attacker to execute arbitrary code upon booting those devic…

  Apple · SecureROM

  EPSS 70%
• Medium 5.3
  CVE-2025-27218 Sitecore Experience Manager (XM) and Experience Platform (XP) 10.4 before KB1002844 allow remote code execution through insecure deserialization.
  EPSS 65%
• High 8.8
  CVE-2024-12284 Authenticated privilege escalation

  NetScaler · Agent · Console

  EPSS 13%
• Medium 5.7
  CVE-2025-1035 Path Traversal in Komtera Technolgies' KLog Server

  Komtera Technolgies · KLog Server

  EPSS 9.8%
• Low 3.5
  CVE-2025-1392 D-Link DIR-816 index.html cross site scripting

  D-Link · DIR-816

  EPSS 8.7%
• Medium 6.8
  CVE-2025-26465 Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled

  Red Hat · Red Hat Enterprise Linux 9 · Red Hat Enterprise Linux 8 · Red Hat Enterprise Linux 7

  EPSS 7.7%
• High 7.3
  CVE-2025-1536 Raisecom Multi-Service Intelligent Gateway Request Parameter vpn_template_style.php os command injection

  Raisecom · Multi-Service Intelligent Gateway

  EPSS 3.2%