Exploited vulnerabilities (CISA KEV)

CVE-2025-61757 Critical · 9.8 KEV Urgent · 73 Public exploit CWE-306 Oct 21, 2025

Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability

Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Identity Manager. Successful attacks of this vulnerability can result in takeover of Identity Manager. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

CVE-2025-61932 Critical · 9.8 KEV High · 61 CWE-940 Oct 20, 2025

Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability

Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets.

CVE-2025-53521 Critical · 9.8 KEV High · 60 CWE-121 Oct 15, 2025

F5 BIG-IP Stack-Based Buffer Overflow Vulnerability

When a BIG-IP APM access policy is configured on a virtual server, specific malicious traffic can lead to Remote Code Execution (RCE). Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CVE-2025-59287 Critical · 9.8 KEV Urgent · 83 Public exploit CWE-502 Oct 14, 2025

Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability

Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

CVE-2025-59230 High · 7.8 KEV High · 54 CWE-284 Oct 14, 2025

Microsoft Windows Improper Access Control Vulnerability

Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

CVE-2025-24990 High · 7.8 KEV High · 61 Public exploit CWE-822 Oct 14, 2025

Microsoft Windows Untrusted Pointer Dereference Vulnerability

Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update. Fax modem hardware dependent on this specific driver will no longer work on Windows. Microsoft recommends removing any existing dependencies on this hardware.

CVE-2025-39964 Medium · 5.5 KEV High · 55 Public exploit CWE-362 Oct 13, 2025

Linux Kernel Race Condition Vulnerability

In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg Issuing two writes to the same af_alg socket is bogus as the data will be interleaved in an unpredictable fashion. Furthermore, concurrent writes may create inconsistencies in the internal socket state. Disallow this by adding a new ctx->write field that indiciates exclusive ownership for writing.

CVE-2025-61884 High · 7.5 KEV Urgent · 79 Public exploit Ransomware CWE-22 Oct 12, 2025

Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Configurator accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

CVE-2025-11371 High · 7.5 KEV Urgent · 79 Public exploit CWE-552 Oct 9, 2025

Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. This issue impacts Gladinet CentreStack and Triofox: All versions prior to and including 16.7.10368.56560

CVE-2025-61882 Critical · 9.8 KEV Urgent · 93 Public exploit Ransomware CWE-287 Oct 5, 2025

Oracle E-Business Suite Unspecified Vulnerability

Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks of this vulnerability can result in takeover of Oracle Concurrent Processing. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).