CISA Adds 3 Flaws to KEV Catalog, Impacting AMI MegaRAC, D-Link, Fortinet

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added three security flaws, each impacting AMI MegaRAC, D-Link DIR-859 router, and Fortinet FortiOS, to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The list of vulnerabilitie...

Mitsubishi Electric Air Conditioning Systems (Update B)

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to control the air conditioning system. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. CISA reminds organizations to perform...

PT-2025-27025 · Undefined · Undefined

A Historic First: BMC Vulnerability CVE-2024-054085 Joins CISA's Most Critical List https://t.co/WMMWeavYPb In June 2025, for the first time, CISA added a Baseboard Management Controller vulnerability to its Known Exploited Vulnerabilities catalog. While BMC vulnerabilities h…...

The Discovery, Disclosure, and Investigation of CVE-2024-25825

CVE-2024-25825 is a vulnerability found in FydeOS. This thesis describes its discovery, disclosure, and its further investigation in connection to a nation state actor. The vulnerability is CWE-1392: Use of Default Credentials, CWE-1393: Use of Default Password, and CWE-258: Empty Password in...

CVE-2025-39205

creationtimestamp| type| source ---|---|--- 2025-06-24 14:46:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19354 2025-07-03 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-184-02 2025-10-16 10:00:00+00:00| seen|...

CVE-2025-39202

creationtimestamp| type| source ---|---|--- 2025-06-24 13:50:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19338 2025-07-03 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-184-02...

CVE-2025-39204

creationtimestamp| type| source ---|---|--- 2025-06-24 13:02:06+00:00| seen| Telegram/b5DYkbguYKKC6SWHwVUadkrQ9RB3hxTshwlycvFN8u4r2U4 2025-06-24 14:46:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19355 2025-07-03 10:00:00+00:00| seen|...

CVE-2025-39203

creationtimestamp| type| source ---|---|--- 2025-06-24 13:02:06+00:00| seen| Telegram/b5DYkbguYKKC6SWHwVUadkrQ9RB3hxTshwlycvFN8u4r2U4 2025-06-24 14:46:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19356 2025-07-03 10:00:00+00:00| seen|...

CISA Releases Eight Industrial Control Systems Advisories

CISA released eight Industrial Control Systems ICS advisories on June 24, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-175-01 Kaleris Navis N4 Terminal Operating System ICSA-25-175-02 Delta Electronics...

CVE-2025-1718

creationtimestamp| type| source ---|---|--- 2025-06-24 11:50:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19327 2025-06-24 13:07:47+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/41716 2025-06-24 19:00:05+00:00| published-proof-of-concept|...

CVE-2025-49152

creationtimestamp| type| source ---|---|--- 2025-06-24 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-175-07 2025-06-25 16:47:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19477 2025-06-25 20:24:49+00:00| seen|...

CVE-2025-49853

creationtimestamp| type| source ---|---|--- 2025-06-24 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-175-05 2025-06-24 19:47:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19392 2025-06-25 01:24:52+00:00| seen|...

CVE-2025-49151

creationtimestamp| type| source ---|---|--- 2025-06-24 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-175-07 2025-06-24 20:06:42+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lseviyt4wp2a 2025-06-25 16:45:14+00:00| seen|...

CVE-2025-49153

creationtimestamp| type| source ---|---|--- 2025-06-24 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-175-07 2025-06-24 20:06:42+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lseviyt4wp2a 2025-06-25 16:47:31+00:00| seen|...

CVE-2025-49852

creationtimestamp| type| source ---|---|--- 2025-06-24 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-175-05 2025-06-24 19:47:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19391 2025-06-25 01:29:52+00:00| seen|...

CVE-2025-2566

creationtimestamp| type| source ---|---|--- 2025-06-24 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-175-01...

CVE-2025-5087

creationtimestamp| type| source ---|---|--- 2025-06-24 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-175-01...

CVE-2025-5015

creationtimestamp| type| source ---|---|--- 2025-06-24 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-175-06 2025-06-24 20:05:21+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lsevglrbmz27 2025-06-25 16:47:37+00:00| seen|...

Delta Electronics CNCSoft

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to execute code within the context of the current process. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. CISA reminds...

CISA Warns of Active Exploitation of Linux Kernel Privilege Escalation Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday placed a security flaw impacting the Linux kernel in its Known Exploited Vulnerabilities KEV catalog, stating it has been actively exploited in the wild. The vulnerability, CVE-2023-0386 CVSS score: 7.8, is an improper...