Week 29, 2025

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2025-53770 Microsoft SharePoint Server Remote Code Execution Vulnerability

  Microsoft · Microsoft SharePoint Server 2019 · Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server Subscription Edition

  EPSS 100%
• Critical 9.6
  CVE-2025-25257 An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiWeb 7.6.0 through…

  Fortinet · FortiWeb

  EPSS 100%
• Critical 9.2
  CVE-2025-54068 Livewire vulnerable to remote command execution during property update hydration

  livewire · livewire

  EPSS 96%
• Critical 9.0
  CVE-2025-54309 CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is not used, mishandles AS2 validation and consequently allows remote attackers t…

  CrushFTP · CrushFTP

  EPSS 93%
• Critical 10.0
  CVE-2025-34300 Sawtooth Software Lighthouse Studio < 9.16.14 Pre-Authentication RCE

  Sawtooth Software · Lighthouse Studio

  EPSS 81%
• Critical 10.0
  CVE-2025-20337 Cisco ISE API Unauthenticated Remote Code Execution Vulnerability

  Cisco · Cisco Identity Services Engine Software · Cisco ISE Passive Identity Connector

  EPSS 74%
• Critical 9.8
  CVE-2025-5394 Alone – Charity Multipurpose Non-profit WordPress Theme <= 7.8.3 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation

  bearsthemes · Alone – Charity Multipurpose Non-profit WordPress Theme

  EPSS 53%
• Critical 9.8
  CVE-2025-52688 Command Injection Vulnerability in the OmniAccess Stellar Web Management Interface

  Alcatel-Lucent · OmniAccess Stellar Products

  EPSS 37%
• Critical 9.3
  CVE-2025-34117 Netcore / Netis Routers RCE via UDP Port 53413 Backdoor

  Netcore · Netis · Router firmware · Router firmware

  EPSS 21%
• Critical 9.8
  CVE-2025-52689 Weak Session ID Check in the OmniAccess Stellar Web Management Interface

  Alcatel-Lucent · OmniAccess Stellar Products

  EPSS 17%
• Critical 9.8
  CVE-2025-52376 An authentication bypass vulnerability in the /web/um_open_telnet.cgi endpoint in Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and below, allowing an…
  EPSS 14%
• Critical 10.0
  CVE-2025-53833 LaRecipe is vulnerable to Server-Side Template Injection attacks

  saleem-hadad · larecipe

  EPSS 9.1%
• Critical 9.8
  CVE-2016-15043 WP Mobile Detector <= 3.5 - Arbitrary File Upload

  Websitez.com · WP Mobile Detector

  EPSS 8.9%
• Critical 9.3
  CVE-2025-34103 WePresent WiPG-1000 Unauthenticated Command Injection in via rdfs.cgi

  WePresent (Barco) · WiPG-1000

  EPSS 5.9%
• Critical 9.8
  CVE-2025-52046 Totolink A3300R V17.0.0cu.596_B20250515 was found to contain a command injection vulnerability in the sub_4197C0 function via the mac and desc parameters. This…
  EPSS 5.3%

All 90 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• Medium 6.5
  CVE-2025-53771 Microsoft SharePoint Server Spoofing Vulnerability

  Microsoft · Microsoft SharePoint Server 2019 · Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server Subscription Edition

  EPSS 100%
• High 7.2
  CVE-2025-6965 Integer Truncation on SQLite

  SQLite · SQLite

  EPSS 73%
• Medium 4.2
  CVE-2025-6197 An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. Prerequisites for exploitation: - Multiple organization…

  Grafana · Grafana

  EPSS 70%
• High 7.6
  CVE-2025-6023 Grafana is vulnerable to XSS attacks through open redirects and path traversal

  Grafana · Grafana

  EPSS 58%
• Medium 6.5
  CVE-2025-20284 Cisco Identity Services Engine Authenticated Remote Code Execution Vulnerability

  Cisco · Cisco Identity Services Engine Software

  EPSS 25%
• Medium 5.4
  CVE-2025-52378 Cross-Site Scripting (XSS) vulnerability in Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and below allowing attackers to inject JavaScript code that …
  EPSS 17%
• Medium 5.4
  CVE-2025-52379 Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and below contains an authenticated command injection vulnerability in the firmware update feature. The …
  EPSS 16%
• Medium 5.4
  CVE-2025-52377 Command injection vulnerability in Nexxt Solutions NCM-X1800 Mesh Router versions UV1.2.7 and below, allowing authenticated attackers to execute arbitrary comm…
  EPSS 14%