Week 13, 2025

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2025-1974 ingress-nginx admission controller RCE escalation

  Kubernetes · ingress-nginx

  EPSS 99%
• Critical 9.8
  CVE-2025-2747 Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication Bypass

  Kentico · Xperience

  EPSS 97%
• Critical 9.8
  CVE-2025-2294 Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion

  Extend Themes · Kubio AI Page Builder

  EPSS 78%
• Critical 9.8
  CVE-2025-2746 Kentico Xperience <= 13.0.172 Staging Sync Server Digest Password Authentication Bypass

  Kentico · Xperience

  EPSS 74%
• Critical 9.8
  CVE-2025-29306 An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component.
  EPSS 47%
• Critical 9.3
  CVE-2023-25610 A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7…

  Fortinet · FortiOS · FortiManager · FortiProxy

  EPSS 18%
• Critical 9.8
  CVE-2025-28219 Netgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usb_adv.cgi, which allows remote attackers to execute arbitrary commands via paramete…
  EPSS 13%
• Critical 9.8
  CVE-2025-25579 TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Command Injection in /bin/boa via bandstr.
  EPSS 10%
• Critical 9.8
  CVE-2024-55964 An issue was discovered in Appsmith before 1.52. An incorrectly configured PostgreSQL instance in the Appsmith image leads to remote command execution inside t…
  EPSS 6.8%
• Critical 9.4
  CVE-2025-30216 CryptoLib Has Heap Overflow in Crypto_TM_ProcessSecurity due to Unchecked Secondary Header Length

  nasa · CryptoLib

  EPSS 2.7%
• Critical 9.8
  CVE-2025-22398 Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A…

  Dell · Unity

  EPSS 2%
• Critical 10.0
  CVE-2025-2857 Incorrect handle could lead to sandbox escapes

  Mozilla · Firefox

  EPSS 2%
• Critical 9.8
  CVE-2025-22953 A SQL injection vulnerability exists in Epicor HCM 2021 1.9, with patches available: 5.16.0.1033/HCM2022, 5.17.0.1146/HCM2023, and 5.18.0.573/HCM2024. The inje…
  EPSS 1.8%
• Critical 9.8
  CVE-2024-55030 A command injection vulnerability in the Command Dispatcher Service of NASA Fprime v3.4.3 allows attackers to execute arbitrary commands.
  EPSS 1.8%
• Critical 9.1
  CVE-2025-24383 Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A…

  Dell · Unity

  EPSS 1.2%

All 77 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 7.2
  CVE-2025-29635 A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending…
  EPSS 88%
• High 8.8
  CVE-2025-1098 ingress-nginx controller - configuration injection via unsanitized mirror annotations

  Kubernetes · ingress-nginx

  EPSS 86%
• Medium 5.3
  CVE-2025-30208 Vite bypasses server.fs.deny when using `?raw??`

  vitejs · vite

  EPSS 75%
• Medium 6.1
  CVE-2025-2748 Kentico Xperience stored cross-site scripting in multiple-file upload functionality

  Kentico · Xperience

  EPSS 61%
• High 8.8
  CVE-2025-24514 ingress-nginx controller - configuration injection via unsanitized auth-url annotation

  Kubernetes · ingress-nginx

  EPSS 37%
• High 8.8
  CVE-2025-1097 ingress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation

  Kubernetes · ingress-nginx

  EPSS 37%
• Medium 6.5
  CVE-2024-55963 An issue was discovered in Appsmith before 1.51. A user on Appsmith that doesn't have admin permissions can trigger the restart API on Appsmith, causing a serv…
  EPSS 33%
• Medium 4.6
  CVE-2025-31140 In JetBrains TeamCity before 2025.03 stored XSS was possible on Cloud Profiles page

  JetBrains · TeamCity

  EPSS 28%