Week 32, 2025

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.4
  CVE-2025-34152 Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via Time Parameter

  Shenzhen Aitemi E Commerce · M300 Wi-Fi Repeater

  EPSS 84%
• Critical 10.0
  CVE-2025-54253 Adobe Experience Manager | Incorrect Authorization (CWE-863)

  Adobe · Adobe Experience Manager

  EPSS 81%
• Critical 9.1
  CVE-2025-6205 Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025

  Dassault Systèmes · DELMIA Apriso

  EPSS 67%
• Critical 9.4
  CVE-2025-54948 A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute co…

  Trend Micro · Trend Micro Apex One

  EPSS 33%
• Critical 9.4
  CVE-2025-54987 A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute co…

  Trend Micro · Trend Micro Apex One

  EPSS 27%
• Critical 9.8
  CVE-2025-8356 Path Traversal leading to RCE

  Xerox · FreeFlow Core

  EPSS 23%
• Critical 9.3
  CVE-2025-53417 File Parsing Deserialization of Untrusted Data in DTM Soft

  Delta Electronics · DIAView

  EPSS 20%
• Critical 10.0
  CVE-2013-10069 D-Link Devices Unauthenticated RCE

  D-Link · DIR-600 rev B · DIR-300 rev B

  EPSS 16%
• Critical 9.3
  CVE-2025-2611 ICTBroadcast <= 7.4 Unauthenticated Session Cookie RCE

  ICT Innovations · ICTBroadcast

  EPSS 8.4%
• Critical 9.3
  CVE-2012-10046 E-Mail Security Virtual Appliance learn-msg.cgi Command Injection

  ESVA-Project · E-Mail Security Virtual Appliance

  EPSS 4.1%
• Critical 9.8
  CVE-2025-8730 Belkin F9K1009/F9K1010 Web Interface hard-coded credentials

  Belkin · F9K1009 · F9K1010

  EPSS 4%
• Critical 9.3
  CVE-2012-10041 WAN Emulator v2.3 Command Execution

  WAN Emulator · WAN Emulator

  EPSS 4%
• Critical 9.4
  CVE-2025-34151 Shenzhen Aitemi M300 Wi-Fi Repeater PPPoE Password Command Injection

  Shenzhen Aitemi E Commerce · M300 Wi-Fi Repeater

  EPSS 3.3%
• Critical 9.8
  CVE-2025-23311 NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a stack overflow through specially crafted HTTP requests. A successful ex…

  NVIDIA · Triton Inference Server

  EPSS 3%
• Critical 9.3
  CVE-2012-10030 FreeFloat FTP Server Arbitrary File Upload

  Freefloat · FTP Server

  EPSS 2.6%

All 92 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 8.4
  CVE-2025-8088 Path traversal vulnerability in WinRAR

  Win-Rar · WinRAR

  EPSS 94%
• High 8.0
  CVE-2025-6204 Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025

  Dassault Systèmes · DELMIA Apriso

  EPSS 77%
• High 7.3
  CVE-2025-36604 Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A…

  Dell · Unity

  EPSS 70%
• High 8.6
  CVE-2025-54254 Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)

  Adobe · Adobe Experience Manager

  EPSS 54%
• Medium 6.5
  CVE-2025-47188 A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones through 6.4 SP4 (R6.4.0.4006), and the 6970 Conference Unit through 6.4 SP4 …
  EPSS 42%
• High 8.7
  CVE-2025-7769 Improper Neutralization of Special Elements used in a Command ('Command Injection') in Tigo Energy Cloud Connect Advanced

  Tigo Energy · Cloud Connect Advanced

  EPSS 23%
• High 8.1
  CVE-2025-50286 A Remote Code Execution (RCE) vulnerability in Grav CMS v1.7.48 allows an authenticated admin to upload a malicious plugin via the /admin/tools/direct-install …
  EPSS 16%
• High 7.5
  CVE-2025-8355 XXE leading to SSRF

  Xerox · FreeFlow Core

  EPSS 11%