Week 43, 2025
20–26 October 2025
Newly exploited 8
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
-
Critical 9.8
CVE-2025-59287 KEV Oct 24, 2025 Windows Server Update Service (WSUS) Remote Code Execution VulnerabilityEPSS 100%
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows Server 2022
- Critical 9.1 EPSS 96%
-
Critical 9.8
CVE-2025-61932 KEV Oct 22, 2025 Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, allowing an attacke…EPSS 2.8%
MOTEX · Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA))
-
Critical 9.8
CVE-2025-2747 KEV Oct 20, 2025 Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication BypassEPSS 97%
-
Critical 9.8
CVE-2025-2746 KEV Oct 20, 2025 Kentico Xperience <= 13.0.172 Staging Sync Server Digest Password Authentication BypassEPSS 74%
-
High 8.8
CVE-2025-33073 KEV Oct 20, 2025 Windows SMB Client Elevation of Privilege VulnerabilityEPSS 83%
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809
-
High 8.8
CVE-2022-48503 KEV Oct 20, 2025 The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6.…EPSS 3.2%
Apple · macOS · iOS and iPadOS · watchOS
-
High 7.5
CVE-2025-61884 KEV Oct 20, 2025 · ransomware Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported versions that are affected are 12.2.3-12.2.14. E…EPSS 96%
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
-
Critical 9.8
CVE-2025-61757 Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported versions that are affected are 12.2.1.4.0 an…EPSS 89%
- Critical 9.8 EPSS 33%
-
Critical 10.0
CVE-2016-15048 AMTT HiBOS Command Injection RCE via server_ping.phpEPSS 7.4%
Anmei Century (Beijing) Technology · Hotel Broadband Operation System (HiBOS)
-
Critical 9.3
CVE-2025-7850 Authenticated OS command executionEPSS 3.3%
TP-Link Systems · Omada Gateways · Festa gateways · Omada Pro gateways
-
Critical 9.8
CVE-2025-61932 Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, allowing an attacke…EPSS 2.8%
MOTEX · Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA))
-
Critical 9.8
CVE-2025-54957 An issue was discovered in Dolby UDC 4.5 through 4.13. A crash of the DD+ decoder process can occur when a malformed DD+ bitstream is processed. When Evolution…EPSS 1.6%
- Critical 9.9 EPSS 1.4%
-
Critical 9.8
CVE-2025-41723 Sauter: Directory Traversal in importFile SOAP MethodEPSS 1.3%
Sauter · modulo 6 devices modu612-LC · EY-modulo 5 modu 5 modu525 · modulo 6 devices modu660-AS
-
Critical 10.0
CVE-2018-25118 GeoVision Command Injection RCE via /PictureCatch.cgiEPSS 1.3%
GeoVision · GV-BX1500 · GeoVision embedded IP devices · GV-MFD1501
-
Critical 9.3
CVE-2025-6542 OS command injection in multiple parametersEPSS 1%
TP-Link Systems · Omada Gateways · Festa gateways · Omada Pro gateways
- Critical 9.8 EPSS 1%
- Critical 9.8
- Critical 9.8
- Critical 10.0
- Critical 10.0
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
- High 8.3 EPSS 29%
- High 7.2 EPSS 24%
-
High 8.3
CVE-2024-58274 Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2024-08-01 allows execution of a command within $( ) in /center/api/installa…EPSS 17%
-
High 7.2
CVE-2025-6978 Diagnostics command injection vulnerabilityEPSS 13%
Arista Networks · Arista Edge Threat Management - Arista Next Generation Firewall
-
High 8.6
CVE-2025-60344 A path traversal (directory traversal) vulnerability in D-Link DSR series routers allows unauthenticated remote attackers to manipulate input parameters used f…EPSS 11%
- High 7.5 EPSS 11%
-
High 8.8
CVE-2025-10680 OpenVPN 2.7_alpha1 through 2.7_beta1 on POSIX based platforms allows a remote authenticated server to inject shell commands via DNS variables when --dns-updown…EPSS 7.7%
-
High 8.1
CVE-2025-9133 A missing authorization vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.4…EPSS 5.9%
Zyxel · USG FLEX series firmware · ATP series firmware · USG20(W)-VPN series firmware
Advisories
- SUSE / openSUSE Security Updates 14361 critical
- BSI CERT-Bund (WID) 731 critical
- Red Hat Security Advisories (RHSA) 4122 critical
- Debian Security (DSA / DLA) 234 critical
- Ubuntu Security Notices (USN) 2312 critical
- NCSC-NL (Netherlands) 17
- Oracle Linux Security Advisories (ELSA) 15
- CISA ICS & IT advisories 135 critical
- AlmaLinux Security Advisories 12
- Rocky Linux Security Advisories 5
- Microsoft Security Response Center 43 critical
- ABB PSIRT 21 critical
- CERT@VDE 2
- Amazon Linux Security Center (ALAS) 22 critical
- SUSE-SU-2025:3761-1 Security update for the Linux Kernel 378 CVEs
- SUSE-SU-2025:20870-1 Security update for the Linux Kernel 346 CVEs
- SUSE-SU-2025:20898-1 Security update for the Linux Kernel 346 CVEs
- SUSE-SU-2025:3751-1 Security update for the Linux Kernel 346 CVEs
- SUSE-SU-2025:3716-1 Security update for the Linux Kernel 324 CVEs
- USN-7833-3 linux-aws-6.14 vulnerabilities 173 CVEs
- USN-7833-2 linux-realtime-6.14 vulnerabilities 173 CVEs
- USN-7833-1 linux, linux-aws, linux-gcp, linux-oem-6.14, linux-oracle, linux-oracle-6.14, linux-raspi, linux-realtime vulnerabilities 173 CVEs
- USN-7834-1 linux-azure, linux-azure-6.14, linux-azure-nvidia-6.14 vulnerabilities 172 CVEs
- SUSE-SU-2025:3725-1 Security update for the Linux Kernel 94 CVEs