Week 19, 2025

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.3
  CVE-2025-2777 SysAid On-Prem <= 23.3.40 lshw Proceessing XML External Entity Injection

  SysAid · SysAid On-Prem

  EPSS 73%
• Critical 9.3
  CVE-2025-2776 SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity Injection

  SysAid · SysAid On-Prem

  EPSS 65%
• Critical 9.3
  CVE-2025-2775 SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection

  SysAid · SysAid On-Prem

  EPSS 43%
• Critical 10.0
  CVE-2025-20188 A vulnerability in the Out-of-Band Access Point (AP) Image Download, the Clean Air Spectral Recording, and the client debug bundles features of Cisco IOS XE So…

  Cisco · Cisco IOS XE Software

  EPSS 28%
• Critical 9.1
  CVE-2025-25014 Kibana arbitrary code execution via prototype pollution

  Elastic · Kibana

  EPSS 22%
• Critical 9.8
  CVE-2025-3605 Frontend Login and Registration Blocks <= 1.1.1 - Unauthenticated Privilege Escalation via Account Takeover

  arkenon · Login, Registration and Lost Password Blocks

  EPSS 7.8%
• Critical 9.9
  CVE-2025-29972 Azure Storage Resource Provider Spoofing Vulnerability

  Microsoft · Azure Storage Resource Provider (SRP)

  EPSS 3.3%
• Critical 9.8
  CVE-2025-4403 Drag and Drop Multiple File Upload for WooCommerce <= 1.1.6 - Unauthenticated Arbitrary File Upload via upload Function

  glenwpcoder · Drag and Drop Multiple File Upload for WooCommerce

  EPSS 2.3%
• Critical 9.8
  CVE-2025-45491 Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the username parameter.
  EPSS 1.9%
• Critical 9.1
  CVE-2025-47733 Microsoft Power Apps Information Disclosure Vulnerability

  Microsoft · Microsoft Power Pages

  EPSS 1.8%
• Critical 9.8
  CVE-2025-45042 Tenda AC9 v15.03.05.14 was discovered to contain a command injection vulnerability via the Telnet function.
  EPSS 1.7%
• Critical 9.8
  CVE-2025-3714 ATEN LCD KVM over IP Switch CL5708IM - Stack-based Buffer Overflow

  ATEN · CL5708IM

  EPSS 1.6%
• Critical 9.8
  CVE-2025-3711 ATEN LCD KVM over IP Switch CL5708IM - Stack-based Buffer Overflow

  ATEN · CL5708IM

  EPSS 1.6%
• Critical 9.8
  CVE-2025-3710 ATEN LCD KVM over IP Switch CL5708IM - Stack-based Buffer Overflow

  ATEN · CL5708IM

  EPSS 1.6%
• Critical 10.0
  CVE-2025-29813 Azure DevOps Elevation of Privilege Vulnerability

  Microsoft · Azure DevOps

  EPSS 1.6%

All 78 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• Medium 6.3
  CVE-2025-4443 D-Link DIR-605L sub_454F2C command injection

  D-Link · DIR-605L

  EPSS 63%
• High 8.3
  CVE-2025-47269 code-server session cookie can be extracted by having user visit specially crafted proxy URL

  coder · code-server

  EPSS 56%
• High 7.5
  CVE-2025-2011 Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection via 's' Parameter

  Averta · Depicter — Popup & Slider Builder

  EPSS 47%
• High 8.7
  CVE-2025-31644 Appliance mode BIG-IP iControl REST and tmsh vulnerability

  F5 · BIG-IP

  EPSS 24%
• Medium 6.3
  CVE-2025-4341 D-Link DIR-880L Request Header ssdpcgi sub_16570 command injection

  D-Link · DIR-880L

  EPSS 24%
• High 7.1
  CVE-2025-32821 A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges can inject shell command arguments to u…

  SonicWall · SMA100

  EPSS 23%
• Medium 6.5
  CVE-2025-45797 TOTOlink A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the NoticeUrl …
  EPSS 18%
• Medium 4.7
  CVE-2025-4357 Tenda RX3 telnet command injection

  Tenda · RX3

  EPSS 16%