Week 14, 2025

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.0
  CVE-2025-22457 A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before ve…

  ivanti · Connect Secure · Policy Secure · Neurons for ZTA gateways

  EPSS 100%
• Critical 9.8
  CVE-2025-31161 CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unless a DMZ proxy instance is used), as ex…

  CrushFTP · CrushFTP

  EPSS 100%
• Critical 9.0
  CVE-2025-30406 Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal's hardcoded machine…

  Gladinet · CentreStack

  EPSS 95%
• Critical 9.8
  CVE-2024-56325 Apache Pinot: Authentication bypass issue. If the path does not contain / and contain . authentication is not required

  Apache Software Foundation · Apache Pinot

  EPSS 80%
• Critical 9.9
  CVE-2025-2945 pgAdmin 4: Remote Code Execution in Query Tool and Cloud Deployment

  pgadmin.org · pgAdmin 4

  EPSS 56%
• Critical 10.0
  CVE-2025-30065 Apache Parquet Java: Arbitrary code execution in the parquet-avro module when reading an Avro schema from a Parquet file metadata

  Apache Software Foundation · Apache Parquet Java

  EPSS 44%
• Critical 9.8
  CVE-2025-27520 BentoML Allows Remote Code Execution (RCE) via Insecure Deserialization

  bentoml · BentoML

  EPSS 41%
• Critical 10.0
  CVE-2021-47667 An OS command injection vulnerability in lib/NSSDropoff.php in ZendTo 5.24-3 through 6.x before 6.10-7 allows unauthenticated remote attackers to execute arbit…

  Zend · ZendTo

  EPSS 36%
• Critical 9.8
  CVE-2025-29085 Vipshop Saturn Console Vulnerable to SQL Injection via ClusterKey Component
  EPSS 31%
• Critical 9.8
  CVE-2025-2005 Front-End-Only-Users <= 3.2.32 - Unauthenticated Arbitrary File Upload

  Rustaurius · Front End Users

  EPSS 22%
• Critical 9.8
  CVE-2025-28146 Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via fota_url in /boafrm/formLtefo…
  EPSS 11%
• Critical 9.8
  CVE-2024-22611 OpenEMR 7.0.2 is vulnerable to SQL Injection via \openemr\library\classes\Pharmacy.class.php, \controllers\C_Pharmacy.class.php and \openemr\controller.php.
  EPSS 6.3%
• Critical 9.8
  CVE-2025-22939 A command injection vulnerability in the telnet service of Adtran 411 ONT L80.00.0011.M2 allows attackers to escalate privileges to root and execute arbitrary …
  EPSS 2.7%
• Critical 9.8
  CVE-2024-54805 Netgear WNR854T 1.5.2 (North America) is vulnerable to Command Injection. An attacker can send a specially crafted request to post.cgi, updating the nvram para…
  EPSS 2.5%
• Critical 9.8
  CVE-2024-54807 In Netgear WNR854T 1.5.2 (North America), the UPNP service is vulnerable to command injection in the function addmap_exec which parses the NewInternalClient pa…
  EPSS 2.5%

All 138 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• Medium 5.3
  CVE-2025-31125 Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query

  vitejs · vite

  EPSS 75%
• Medium 6.1
  CVE-2025-30676 Apache OFBiz: Stored XSS Vulnerability

  Apache Software Foundation · Apache OFBiz

  EPSS 68%
• Medium 5.3
  CVE-2025-31486 Vite allows server.fs.deny to be bypassed with .svg or relative paths

  vitejs · vite

  EPSS 40%
• High 8.6
  CVE-2024-36465 SQL injection in Zabbix API

  Zabbix · Zabbix

  EPSS 40%
• Medium 6.7
  CVE-2025-30401 A spoofing issue in WhatsApp for Windows prior to version 2.2450.6 displayed attachments according to their MIME type but selected the file opening handler bas…

  Facebook · WhatsApp Desktop for Windows

  EPSS 21%
• High 7.3
  CVE-2025-3002 Digital China DCME-520 mon_merge_stat_hist.php os command injection

  Digital China · DCME-520

  EPSS 20%
• High 7.0
  CVE-2025-31121 OpenEMR allows XSS in Patient Image feature

  Open-Emr · openemr

  EPSS 17%
• High 7.4
  CVE-2025-3155 Yelp: arbitrary file read

  Red Hat · Red Hat Enterprise Linux 9 · Red Hat Enterprise Linux 8 · Red Hat Enterprise Linux 7

  EPSS 13%