Week 52, 2025

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.3
  CVE-2025-68664 LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs

  langchain-ai · langchain

  EPSS 43%
• Critical 9.8
  CVE-2025-68615 Net-SNMP snmptrapd crash

  net-snmp · Net-SNMP

  EPSS 42%
• Critical 10.0
  CVE-2025-54322 Xspeeder SXZOS through 2025-12-26 allows root remote code execution via base64-encoded Python code in the chkid parameter to vLogin.py. The title and oIP param…

  Xspeeder · SXZOS

  EPSS 15%
• Critical 9.9
  CVE-2025-68668 n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node

  n8n-io · n8n

  EPSS 13%
• Critical 9.8
  CVE-2025-13915 Authentication bypass in IBM API Connect

  IBM · API Connect

  EPSS 9%
• Critical 10.0
  CVE-2025-66209 Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Database Backup

  coollabsio · coolify

  EPSS 3.9%
• Critical 9.8
  CVE-2025-13773 Print Invoice & Delivery Notes for WooCommerce <= 5.8.0 - Unauthenticated Remote Code Execution

  tychesoftwares · Print Invoice & Delivery Notes for WooCommerce

  EPSS 3.7%
• Critical 9.8
  CVE-2023-53963 SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Remote Command Injection

  SOUND4 · Kantar Media · Impact/Pulse Eco · BigVoice2

  EPSS 3.4%
• Critical 9.4
  CVE-2025-66213 Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in File Storage Directory Mount Path

  coollabsio · coolify

  EPSS 3.3%
• Critical 9.4
  CVE-2025-66212 Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Dynamic Proxy Configuration Filename

  coollabsio · coolify

  EPSS 3.3%
• Critical 9.4
  CVE-2025-66211 Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in PostgreSQL Init Script Filename

  coollabsio · coolify

  EPSS 2.9%
• Critical 9.4
  CVE-2025-66210 Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Database Import

  coollabsio · coolify

  EPSS 2.9%
• Critical 9.1
  CVE-2025-68916 Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file upload with resultant code execution.

  Riello · NetMan

  EPSS 2.6%
• Critical 9.8
  CVE-2025-14500 IceWarp14 X-File-Operation Command Injection Remote Code Execution Vulnerability

  IceWarp · IceWarp

  EPSS 1.6%
• Critical 9.8
  CVE-2025-29228 Linksys E5600 V1.1.0.26 is vulnerable to command injection in the runtime.macClone function via the mc.ip parameter.
  EPSS 1.3%

All 81 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 8.8
  CVE-2025-68645 A Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra Collaboration (ZCS) 10.0 and 10.1 because of improper handling of user-su…
  EPSS 51%
• High 8.8
  CVE-2019-25246 Beward N100 H.264 VGA IP Camera M2.1.6 Authenticated File Disclosure

  Beward R&D · N100 H.264 VGA IP Camera

  EPSS 19%
• Medium 6.3
  CVE-2025-15139 TRENDnet TEW-822DRE formWsc sub_43ACF4  command injection

  Trendnet · TEW-822DRE

  EPSS 13%
• High 7.3
  CVE-2025-15048 Tenda WH450 HTTP Request CheckTools command injection

  Tenda · WH450

  EPSS 12%
• High 8.8
  CVE-2025-15137 TRENDnet TEW-800MB NTPSyncWithHost.cgi sub_F934  command injection

  Trendnet · TEW-800MB

  EPSS 11%
• High 8.8
  CVE-2025-15136 TRENDnet TEW-800MB Management wizardset do_setWizard_asp command injection

  Trendnet · TEW-800MB

  EPSS 11%
• Medium 6.3
  CVE-2025-15133 ZSPACE Z4Pro+ HTTP POST Request close zfilev2_api_CloseSafe command injection

  ZSPACE · Z4Pro+

  EPSS 7.9%
• Medium 6.3
  CVE-2025-15132 ZSPACE Z4Pro+ HTTP POST Request open zfilev2_api_open command injection

  ZSPACE · Z4Pro+

  EPSS 7.6%