Week 27, 2025

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.3
  CVE-2025-32463 Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.

  sudo-project · sudo

  EPSS 56%
• Critical 9.8
  CVE-2025-6934 Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation via 'on_regiser_user'

  wpopal · Opal Estate Pro – Property Management and Submission

  EPSS 25%
• Critical 10.0
  CVE-2025-34067 Hikvision Integrated Security Management Platform Remote Command Execution via applyCT Fastjson

  Hikvision · Integrated Security Management Platform

  EPSS 22%
• Critical 10.0
  CVE-2025-41656 Pilz: Missing Authentication in Node-RED integration

  Pilz · IndustrialPI 4 with Firmware Bullseye

  EPSS 12%
• Critical 9.0
  CVE-2025-34087 Pi-Hole AdminLTE Whitelist (now 'Web Allowlist') Remote Command Execution

  pi-hole · web

  EPSS 7%
• Critical 9.3
  CVE-2025-34082 IGEL OS Secure Terminal and Secure Shadow Remote Code Execution

  IGEL · OS

  EPSS 6.6%
• Critical 10.0
  CVE-2025-34073 stamparm/maltrail <=0.54 Remote Command Execution

  stamparm · maltrail

  EPSS 5.5%
• Critical 10.0
  CVE-2025-34054 AVTECH IP camera, DVR, and NVR Devices Unauthenticated Command Injection

  AVTECH · IP camera, DVR, and NVR Devices

  EPSS 2.7%
• Critical 9.1
  CVE-2025-49029 WordPress Custom Login And Signup Widget plugin <= 1.0 - Arbitrary Code Execution vulnerability

  bittokazi · Custom Login And Signup Widget

  EPSS 2.4%
• Critical 9.3
  CVE-2025-34089 Remote for Mac Unauthenticated Remote Code Execution via AppleScript Injection

  Aexol Studio · Remote for Mac

  EPSS 2.3%
• Critical 9.4
  CVE-2025-34074 Lucee Admin Interface Authenticated Remote Code Execution via Scheduled Job File Write

  Lucee Association Switzerland · Lucee

  EPSS 2.2%
• Critical 9.3
  CVE-2025-34061 PHPStudy 2016-2018 Backdoor Remote Code Execution Vulnerability

  Henan Xiaopi Security Technology · PHPStudy

  EPSS 1.9%
• Critical 9.4
  CVE-2025-34056 AVTECH IP camera, DVR, and NVR Devices Authenticated Root Command Execution

  AVTECH · IP camera, DVR, and NVR Devices

  EPSS 1.9%
• Critical 9.4
  CVE-2025-34055 AVTECH IP camera, DVR, and NVR Devices Authenticated Root Command Execution

  AVTECH · IP camera, DVR, and NVR Devices

  EPSS 1.6%
• Critical 10.0
  CVE-2025-20309 Cisco Unified Communications Manager Static SSH Credentials Vulnerability

  Cisco · Cisco Unified Communications Manager

  EPSS 1.2%

All 61 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 7.2
  CVE-2025-5961 Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload

  wpvividplugins · WPvivid — Backup, Migration & Staging

  EPSS 55%
• Medium 6.3
  CVE-2025-7083 Belkin F9K1122 webs mp os command injection

  Belkin · F9K1122

  EPSS 47%
• High 7.5
  CVE-2025-37098 A path traversal vulnerability exists in HPE Insight Remote Support (IRS) prior to v7.15.0.646.

  Hewlett Packard Enterprise · Insight Remote Support

  EPSS 46%
• High 8.1
  CVE-2025-4380 Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion

  scripteo · Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager

  EPSS 43%
• High 7.5
  CVE-2025-53107 @cyanheads/git-mcp-server vulnerable to command injection in several tools

  cyanheads · git-mcp-server

  EPSS 25%
• Medium 6.7
  CVE-2025-47228 In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), shell injection in the SSH connection settings allows authenticated attack…

  ScriptCase · ScriptCase

  EPSS 23%
• Medium 6.3
  CVE-2025-7081 Belkin F9K1122 webs formSetWanStatic os command injection

  Belkin · F9K1122

  EPSS 20%
• Medium 6.3
  CVE-2025-6898 D-Link DI-7300G+ in proxy_client.asp os command injection

  D-Link · DI-7300G+

  EPSS 18%