Do Son A critical vulnerability (CVSS 9.3) in Docker Desktop could allow malicious containers to gain full control of the host system. Update now to version 4.44.3.
Vulnerability
A new zero-click NTLM flaw (CVE-2025-50154) bypasses Microsoft's patch for a similar vulnerability, allowing attackers to leak credentials and drop malware.
A critical flaw (CVE-2025-24103) in macOS InstallAssistant allows a normal user to bypass TCC, exposing private data. A PoC is public, urging users to update to 15.3.
Ubiquiti has issued an advisory for a critical flaw (CVE-2025-24285, CVSS 9.8) in its UniFi Connect EV Stations, allowing remote command injection and unauthenticated RCE.
A critical integer overflow in VirtualBox (CVE-2025-30712) allows an attacker to escape the VM and execute code on the host, with a public proof-of-concept available.
Dell patched a critical flaw (CVE-2025-36594) in DD OS allowing unauthenticated remote auth bypass. DDSH CLI flaws (CVE-2025-30096-30099) also patched.
Rtpengine's critical flaws (CVE-2025-53399, CVSS 9.3) allow attackers to intercept or inject audio into active VoIP calls, even without a MitM position, by exploiting SRTP validation.
A critical vulnerability (CVE-2025-46811, CVSS 9.8) in SUSE Manager allows unauthenticated remote command execution with root privileges on all managed Linux clients.
Elastic patched two local privilege escalation flaws (CVE-2025-0712, CVE-2025-25011) in APM Server and Beats for Windows, allowing local attackers to gain SYSTEM privileges.
A critical SSRF vulnerability (CVE-2025-54381) in BentoML's file upload handling allows unauthenticated remote attackers to perform internal network reconnaissance and steal cloud metadata credentials from AI applications.
ASUS has patched two high-severity flaws (CVE-2025-4569, CVE-2025-4570) in MyASUS, stemming from insecure token storage that could lead to unauthorized access. Update immediately!
A critical command injection flaw (CVE-2025-54418, CVSS 9.8) in CodeIgniter's ImageMagick handler allows remote code execution via malicious filenames or text.
A critical flaw (CVE-2025-41240, CVSS 10.0) in Bitnami Helm charts exposes Kubernetes secrets via publicly accessible paths, allowing unauthenticated remote access. Update immediately!
Mitel warns of a critical authentication bypass vulnerability in MiVoice MX-ONE's Provisioning Manager, allowing unauthenticated attackers unauthorized access to accounts.
SonicWall warns of CVE-2025-40599 in SMA 100 series, allowing authenticated admins to upload arbitrary files, potentially leading to RCE.
CISA and Schneider Electric warn of critical, actively exploited RCEs in EcoStruxure Power Operation (EPO), impacting industrial control systems. Public exploits are available.
Kubernetes warns of CVE-2025-7342 (CVSS 8.1) in Image Builder. Default credentials in Windows VM images (Nutanix/OVA) allow unauthenticated root access to clusters. Patch immediately!
A Windows CLFS zero-day (CVE-2025-29824) actively exploited by RansomEXX and Play ransomware gangs for privilege escalation, with a public PoC. Patch now!
Ubiquiti warns of CVE-2025-27212, a critical (CVSS 9.8) command injection vulnerability in UniFi Access devices, enabling unauthenticated RCE on the management network.
Four critical flaws, including unauthenticated telnet access and RCE, discovered in Nexxt Solutions NCM-X1800 mesh routers allow full network compromise. Update or disable immediately.
A critical pre-authentication root RCE (CVE-2025-34068) in Samsung WLAN AP WEA453e allows full device takeover. Update firmware immediately to version 5.2.4.T1.
A critical RCE flaw (CVE-2025-5333) in Symantec Endpoint Management (Altiris) allows unauthenticated attackers to execute arbitrary code via insecure .NET Remoting deserialization.