Week 51, 2025

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 10.0
  CVE-2025-68613 n8n Vulnerable to Remote Code Execution via Expression Injection

  n8n-io · n8n

  EPSS 99%
• Critical 10.0
  CVE-2025-37164 A remote code execution issue exists in HPE OneView.

  Hewlett Packard Enterprise (HPE) · HPE OneView

  EPSS 90%
• Critical 10.0
  CVE-2025-20393 Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability

  Cisco · Cisco Secure Email · Cisco Secure Email and Web Manager

  EPSS 32%
• Critical 9.3
  CVE-2025-14733 WatchGuard Firebox iked Out of Bounds Write Vulnerability

  WatchGuard · Fireware OS

  EPSS 29%
• Critical 9.8
  CVE-2025-14707 Shiguangwu sgwbox N3 DOCKER Feature http_eshell_server command injection

  Shiguangwu · sgwbox N3

  EPSS 19%
• Critical 9.8
  CVE-2025-14706 Shiguangwu sgwbox N3 NETREBOOT http_eshell_server command injection

  Shiguangwu · sgwbox N3

  EPSS 19%
• Critical 9.8
  CVE-2025-14705 Shiguangwu sgwbox N3 SHARESERVER Feature command injection

  Shiguangwu · sgwbox N3

  EPSS 17%
• Critical 10.0
  CVE-2025-44005 Step CA Has Authorization Bypass in ACME and SCEP Provisioners

  smallstep · Step-CA

  EPSS 9.1%
• Critical 9.8
  CVE-2025-14156 Fox LMS – WordPress LMS Plugin 1.0.4.7 - 1.0.5.1 - Unauthenticated Privilege Escalation via 'createOrder'

  Ays Pro · Fox LMS – WordPress LMS Plugin

  EPSS 6.8%
• Critical 9.8
  CVE-2025-14879 Tenda WH450 HTTP Request onSSIDChange stack-based overflow

  Tenda · WH450

  EPSS 6.7%
• Critical 9.9
  CVE-2025-14700 Improper Neutralization of Special Elements Used in a Template Engine in Crafty Controller

  Arcadia Technology · Crafty Controller

  EPSS 6.6%
• Critical 9.8
  CVE-2025-14708 Shiguangwu sgwbox N3 WIREDCFGGET http_eshell_server buffer overflow

  Shiguangwu · sgwbox N3

  EPSS 6.5%
• Critical 9.8
  CVE-2023-53941 EasyPHP Webserver 14.1 Remote Code Execution

  EasyPHP · EasyPHP Webserver

  EPSS 6.4%
• Critical 9.8
  CVE-2025-14709 Shiguangwu sgwbox N3 WIRELESSCFGGET http_eshell_server buffer overflow

  Shiguangwu · sgwbox N3

  EPSS 5.9%
• Critical 10.0
  CVE-2025-62521 ChurchCRM has unauthenticated RCE in its Install Wizard

  ChurchCRM · CRM

  EPSS 4.5%

All 119 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 7.5
  CVE-2025-14847 Zlib compressed protocol header length confusion may allow memory read

  MongoDB · MongoDB Server

  EPSS 83%
• Medium 4.3
  CVE-2025-43541 A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, …

  Apple · macOS · iOS and iPadOS · visionOS

  EPSS 34%
• High 7.2
  CVE-2025-68461 Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cross-Site-Scripting (XSS) vulnerability via the animate tag in an SVG document.

  Roundcube · Webmail

  EPSS 27%
• High 8.8
  CVE-2025-43529 A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.…

  Apple · macOS · iOS and iPadOS · watchOS

  EPSS 26%
• Medium 4.3
  CVE-2025-63387 Dify 1.9.1 and 1.17.0 exposes the /console/api/system-features endpoint to unauthenticated HTTP GET requests that return system feature and configuration infor…

  Dify · Dify

  EPSS 19%
• High 8.1
  CVE-2025-68154 Command Injection in fsSize() on Windows

  sebhildebrandt · systeminformation

  EPSS 13%
• High 7.3
  CVE-2025-14704 Shiguangwu sgwbox N3 API eshell path traversal

  Shiguangwu · sgwbox N3

  EPSS 12%
• High 7.2
  CVE-2025-14884 D-Link DIR-605 Firmware Update Service command injection

  D-Link · DIR-605

  EPSS 11%