Week 42, 2025

13–19 October 2025

New CVEs: 953
Critical: 79
High: 383
Newly exploited: 5
Advisories: 530
Malicious pkgs: 171

Newly exploited 5

Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.

Critical 10.0
CVE-2025-54253 KEV Oct 15, 2025 Adobe Experience Manager | Incorrect Authorization (CWE-863)
Adobe · Adobe Experience Manager

EPSS 81%
Critical 9.8
CVE-2016-7836 KEV Oct 14, 2025 SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on the TCP connection with the management con…
Sky · SKYSEA Client View

EPSS 19%
High 7.8
CVE-2025-59230 KEV Oct 14, 2025 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 2.7%
High 7.8
CVE-2025-24990 KEV Oct 14, 2025 Windows Agere Modem Driver Elevation of Privilege Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 6.5%
Medium 4.6
CVE-2025-47827 KEV Oct 14, 2025 In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted roo…
EPSS 5.2%

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

Critical 9.8
CVE-2025-59287 Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows Server 2022

EPSS 100%
Critical 9.9
CVE-2025-55315 ASP.NET Security Feature Bypass Vulnerability
Microsoft · Microsoft Visual Studio 2022 version 17.14 · Microsoft Visual Studio 2022 version 17.12 · Microsoft Visual Studio 2022 version 17.10

EPSS 67%
Critical 10.0
CVE-2025-62168 Squid vulnerable to information disclosure via authentication credential leakage in error handling
squid-cache · squid

EPSS 62%
Critical 9.3
CVE-2025-34515 Ilevia EVE X1 Server 4.7.18.0.eden Root Privilege Escalation
Ilevia Srl. · EVE X1 Server

EPSS 8.4%
Critical 9.3
CVE-2025-34513 Ilevia EVE X1 Server 4.7.18.0.eden Unauthenticated Command Injection
Ilevia Srl. · EVE X1 Server

EPSS 7.6%
Critical 9.3
CVE-2023-7304 Ruijie RG-UAC nmc_sync.php Command Injection
Ruijie · RG-UAC

EPSS 3.6%
Critical 9.8
CVE-2025-53521 BigIP APM Vulnerability
F5 · BIG-IP

EPSS 2.3%
Critical 9.8
CVE-2025-54539 Apache ActiveMQ NMS AMQP Client: Deserialization of Untrusted Data
Apache Software Foundation · Apache ActiveMQ NMS AMQP Client

EPSS 2.1%
Critical 9.3
CVE-2023-7311 BYTEVALUE Intelligent Flow Control Router Command Injection
BYTEVALUE (Luoyang Baiwei Intelligent Technology Co., Ltd.) · Flow Control Router

EPSS 1.9%
Critical 9.8
CVE-2025-11900 HGiga｜iSherlock - OS Command Injection
HGiga · iSherlock 4.5 · iSherlock 5.5

EPSS 1.8%
Critical 9.8
CVE-2023-28815 Some versions of Hikvision's iSecure Center Product contain insufficient parameter validation, resulting in a command injection vulnerability. Attackers may ex…
Hikvision · iSecure Center

EPSS 1.4%
Critical 9.9
CVE-2025-49708 Microsoft Graphics Component Elevation of Privilege Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 1.3%
Critical 9.3
CVE-2025-11849 Mammoth is vulnerable to Directory Traversal
EPSS 1.1%
Critical 9.8
CVE-2025-11391 PPOM – Product Addons & Custom Fields for WooCommerce <= 33.0.15 - Unauthenticated Arbitrary File Upload
themeisle · PPOM – Product Addons & Custom Fields for WooCommerce
Critical 9.8
CVE-2025-10041 Flex QR Code Generator <= 1.2.5 - Unauthenticated Arbitrary File Upload
ajitdas · Flex QR Code Generator

All 79 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

Advisories

DLA-4328-1 linux-6.1 - security update 465 CVEs
SUSE-SU-2025:03634-1 Security update for the Linux Kernel 445 CVEs
SUSE-SU-2025:03615-1 Security update for the Linux Kernel 378 CVEs
SUSE-SU-2025:20851-1 Security update for the Linux Kernel 346 CVEs
SUSE-SU-2025:20861-1 Security update for the Linux Kernel 346 CVEs
SUSE-SU-2025:03600-1 Security update for the Linux Kernel 346 CVEs
DLA-4327-1 linux - security update 331 CVEs
SUSE-SU-2025:03628-1 Security update for the Linux Kernel 326 CVEs
SUSE-SU-2025:03633-1 Security update for the Linux Kernel 196 CVEs
SUSE-SU-2025:03614-1 Security update for the Linux Kernel 183 CVEs