Do Son GNU Wget2 flaws (CVE-2025-69194 & 69195) allow attackers to overwrite files and crash systems via malicious downloads. Update your tools immediately!
Linux Security
Two critical flaws (CVE-2025-46415, CVE-2025-46416) in guix-daemon allow local attackers to gain root access via socket exploitation and race conditions.
A critical flaw (CVE-2025-4404, CVSS 9.1) in FreeIPA allows authenticated users to escalate privileges to domain admin via Kerberos impersonation.
A IGEL OS 10 flaw (CVE-2025-47827) allows full Secure Boot bypass, enabling attackers to load untrusted kernels and rootkits. No patch is available.
glibc vulnerability CVE-2025-4802 could allow attackers to hijack setuid binaries on Linux systems, putting millions at risk.
IGEL OS suffers from a critical privilege escalation vulnerability affecting OS 11 and OS 12. Users are urged to patch immediately.
Finit's internal getty flaw lets users bypass /bin/login and access Linux systems without authentication. Patch to version 4.11 or use external getty.
ARMO researchers reveal how io_uring blinds Linux security tools like Falco, Tetragon, and Defender, exposing systems to undetected rootkit attacks.
CVE-2025-32428 flaw in Jupyter Remote Desktop Proxy exposes TigerVNC over the network. Patch to version 3.0.1 or switch to TurboVNC to mitigate.