Do Son Wordfence warns a Critical (CVSS 9.8) flaw (CVE-2025-5947) in Service Finder Bookings is being actively exploited to bypass authentication and gain full admin access.
Critical Vulnerability
The Qt Group patched two critical flaws in Qt SVG: a UAF bug (CVE-2025-10729) that risks RCE, and recursive pattern element (CVE-2025-10728) leading to stack overflow DoS.
A Critical (CVSS 9.7) DNS rebinding flaw (CVE-2025-59159) in the SillyTavern LLM interface allows remote attackers to seize full control of local AI instances and steal API keys.
Oracle issued an emergency alert for a Critical RCE flaw (CVE-2025-61882) in E-Business Suite that requires no authentication.
A Critical (CVSS 9.8) flaw (CVE-2025-6388) in the Spirit Framework WordPress plugin is being actively exploited, allowing unauthenticated attackers to hijack admin accounts.
Unit 42 disclosed a Critical unauthenticated RCE flaw (CVE-2025-52906) in TOTOLINK X6000R routers, allowing remote attackers to execute arbitrary commands. Update immediately.
CISA warns of a Critical RCE flaw (CVSS 9.8) in Megasys Telenium Online Web Application. The vulnerability allows unauthenticated attackers to execute arbitrary OS commands.
Cisco disclosed a Critical RCE flaw in its Firewall ASA/FTD, IOS, IOS XE, and IOS XR web services. Unauthenticated attackers can gain root access.
A critical flaw (CVE-2025-3699) in Mitsubishi Electric AC systems allows remote authentication bypass, risking illegal control and firmware tampering.
Avaya CMS hit by CVSS 9.9 flaw allowing remote command execution via web request. Affected versions must upgrade to avoid system compromise.
CISA warns of a critical vulnerability (CVE-2025-1907) in Instantel Micromate devices, allowing unauthenticated remote command execution. Immediate action is advised.
Ivanti patches CVE-2025-22462, a critical CVSS 9.8 auth bypass flaw in Neurons for ITSM. Risk of full admin access. Patch or restrict IIS access now.
Critical 0-click flaw in Microsoft Telnet Server allows attackers to bypass authentication & gain admin access. Learn about the MS-TNAP vulnerability & how to mitigate