Week 17, 2025

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 10.0
  CVE-2025-32432 Craft CMS Allows Remote Code Execution

  craftcms · cms

  EPSS 100%
• Critical 10.0
  CVE-2025-31324 Missing Authorization check in SAP NetWeaver (Visual Composer development server)

  SAP · SAP NetWeaver (Visual Composer development server)

  EPSS 99%
• Critical 9.3
  CVE-2025-34028 Commvault Command Center Innovation Release <= 11.38.25 Unathenticated Install Package Path Traversal

  Commvault · Command Center Innovation Release

  EPSS 98%
• Critical 9.3
  CVE-2025-32969 org.xwiki.platform:xwiki-platform-rest-server allows SQL injection in query endpoint of REST API

  xwiki · xwiki-platform

  EPSS 80%
• Critical 9.1
  CVE-2025-46271 Planet Technology Network Products OS Command Injection

  PLANET Technology · UNI-NMS-Lite

  EPSS 2%
• Critical 9.8
  CVE-2025-29659 Yi IOT XY-3820 6.0.24.10 is vulnerable to Remote Command Execution via the "cmd_listen" function located in the "cmd" binary.
  EPSS 1.5%
• Critical 9.8
  CVE-2025-2907 Order Delivery Date Pro for WooCommerce < 12.3.1 - Unauthenticated Arbitrary Option Update
  EPSS 1.4%
• Critical 9.8
  CVE-2025-28036 TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeU…
  EPSS 1.4%
• Critical 9.8
  CVE-2025-28035 TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUr…
  EPSS 1.4%
• Critical 9.8
  CVE-2025-28034 TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201…
  EPSS 1.4%
• Critical 9.8
  CVE-2025-29660 A vulnerability exists in the daemon process of the Yi IOT XY-3820 v6.0.24.10, which exposes a TCP service on port 6789. This service lacks proper input valida…
  EPSS 1.3%
• Critical 9.8
  CVE-2023-43958 An arbitrary file upload vulnerability in the component /jquery-file-upload/server/php/index.php of Hospital Management System v4.0 allows an unauthenticated a…
  EPSS 1.2%
• Critical 9.1
  CVE-2025-46272 Planet Technology Network Products OS Command Injection

  PLANET Technology · WGS-4215-8T2S · WGS-804HPT-V2

  EPSS 1.2%
• Critical 9.8
  CVE-2025-28037 TOTOLINK A810R V4.1.2cu.5182_B20201026 and A950RG V4.1.2cu.5161_B20200903 were found to contain a pre-auth remote command execution vulnerability in the setDia…
  EPSS 1.2%
• Critical 9.8
  CVE-2025-28039 TOTOLINK EX1200T V4.1.2cu.5232_B20210713 was found to contain a pre-auth remote command execution vulnerability in the setUpgradeFW function through the FileNa…
  EPSS 1.2%

All 52 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• Low 3.5
  CVE-2025-46618 In JetBrains TeamCity before 2025.03.1 stored XSS was possible on Data Directory tab

  JetBrains · TeamCity

  EPSS 63%
• High 7.5
  CVE-2025-43864 React Router allows a DoS via cache poisoning by forcing SPA mode

  remix-run · react-router

  EPSS 20%
• Medium 4.7
  CVE-2025-3983 AMTT Hotel Broadband Operation System nlog_down.php command injection

  AMTT · Hotel Broadband Operation System

  EPSS 18%
• High 8.8
  CVE-2025-3914 Aeropage Sync for Airtable <= 3.2.0 - Authenticated (Subscriber+) Arbitrary File Upload

  aeropage · Aeropage Sync for Airtable

  EPSS 17%
• High 7.8
  CVE-2025-2760 GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability

  GIMP · GIMP

  EPSS 17%
• Medium 6.8
  CVE-2025-2703 The built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability. A user with Editor permissions is able to modify such a panel in order to make it execut…

  Grafana · Grafana · Grafana Enterprise

  EPSS 16%
• Medium 4.9
  CVE-2025-3577 **UNSUPPORTED WHEN ASSIGNED** A path traversal vulnerability in the web management interface of the Zyxel AMG1302-T10B firmware version 2.00(AAJC.16)C0 could a…

  Zyxel · AMG1302-T10B firmware

  EPSS 13%
• Medium 6.3
  CVE-2025-3987 TOTOLINK N150RT formWsc command injection

  Toto Link · N150RT

  EPSS 11%