Week 31, 2025

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.4
  CVE-2025-54782 @nestjs/devtools-integration's CSRF to Sandbox Escape Allows for RCE against JS Developers

  nestjs · nest

  EPSS 47%
• Critical 9.3
  CVE-2025-54574 Squid's URN Handling can lead to Buffer Overflow

  squid-cache · squid

  EPSS 22%
• Critical 9.3
  CVE-2013-10048 D-Link Devices command.php Unauthenticated RCE

  D-Link · DIR-600 · DIR-300

  EPSS 17%
• Critical 9.3
  CVE-2013-10037 WebTester 5.x install2.php Unauthenticated Command Execution

  Eppler Software · WebTester

  EPSS 14%
• Critical 9.9
  CVE-2025-54381 BentoML is Vulnerable to an SSRF Attack Through File Upload Processing

  bentoml · BentoML

  EPSS 14%
• Critical 9.8
  CVE-2025-46811 SUSE Multi Linux Manager allows code execution via unprotected websocket endpoint

  SUSE · SUSE Manager Server Module 4.3 · Image SLES15-SP4-Manager-Server-4-3-BYOS · Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2

  EPSS 14%
• Critical 9.8
  CVE-2025-50475 An OS command injection vulnerability exists in Russound MBX-PRE-D67F firmware version 3.1.6, allowing unauthenticated attackers to execute arbitrary commands …
  EPSS 7.6%
• Critical 9.4
  CVE-2013-10060 Netgear Routers pppoe.cgi RCE

  NETGEAR · DGN2200B

  EPSS 6.3%
• Critical 9.3
  CVE-2012-10021 D-Link DIR-605L Captcha Handling Buffer Overflow

  D-Link · DIR-605L

  EPSS 5.1%
• Critical 9.8
  CVE-2025-5947 Service Finder Bookings <= 6.0 - Authentication Bypass via User Switch Cookie

  Aonetheme · Service Finder Bookings

  EPSS 4.9%
• Critical 10.0
  CVE-2013-10040 ClipBucket <= 2.6 ofc_upload_image.php Arbitrary File Upload RCE

  ClipBucket · ClipBucket

  EPSS 4.4%
• Critical 9.3
  CVE-2013-10051 InstantCMS <= 1.6 Remote PHP Code Execution

  InstantCMS · InstantCMS

  EPSS 3.7%
• Critical 9.8
  CVE-2025-50578 LinuxServer.io heimdall 2.6.3-ls307 contains a vulnerability in how it handles user-supplied HTTP headers, specifically `X-Forwarded-Host` and `Referer`. An un…
  EPSS 3.1%
• Critical 9.3
  CVE-2013-10034 Kaseya < 6.3.0.2 uploadImage.asp Arbitrary File Upload RCE

  Kaseya · KServer

  EPSS 3%
• Critical 9.3
  CVE-2013-10042 freeFTPd <= 1.0.10 PASS Command Stack-Based Buffer Overflow

  freeFTPd · freeFTPd

  EPSS 3%

All 97 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 7.2
  CVE-2025-54136 Cursor's Modification of MCP Server Definitions Bypasses Manual Re-approvals

  cursor · cursor

  EPSS 32%
• High 8.6
  CVE-2013-10059 D-Link Routers tools_vct.htm OS Command Injection

  D-Link · DIR-615H1

  EPSS 26%
• High 8.7
  CVE-2013-10050 D-Link Devices tools_vct.xgi Authenticated RCE

  D-Link · DIR-615 rev D · DIR-300 rev A

  EPSS 13%
• Medium 5.3
  CVE-2025-54766 KL-001-2025-012: Xorux XorMon-NG Read Only User Export Device Configuration Exposing Sensitive Information

  Xorux · XorMon-NG

  EPSS 10%
• Medium 5.3
  CVE-2025-54765 KL-001-2025-013: Xorux XorMon-NG Web Application Privilege Escalation to Administrator

  Xorux · XorMon-NG

  EPSS 10%
• Medium 5.8
  CVE-2025-24485 A server-side request forgery vulnerability exists in the cecho.php functionality of MedDream PACS Premium 7.3.5.860. A specially crafted HTTP request can lead…

  MedDream · MedDream PACS Premium

  EPSS 8.9%
• Medium 6.5
  CVE-2025-54767 KL-001-2025-014: Xorux LPAR2RRD Read Only User Denial of Service

  Xorux · LPAR2RRD

  EPSS 8.5%
• Medium 6.9
  CVE-2025-53399 In Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core allows remote attackers to inject or in…

  Sipwise · rtpengine

  EPSS 7.2%