Unpacking the 2025 Gartner Market Guide for CNAPP

From siloed tools to a unified platform: Key takeaways from Gartner's new CNAPP report...

PT-2025-34679 · Securden · Securden Unified Pam Remote Vendor Gateway

Name of the Vulnerable Software and Affected Versions: Securden Unified PAM Remote Vendor Gateway affected versions not specified Description: Securden’s Unified PAM Remote Vendor Gateway access portal shares infrastructure and access tokens across multiple tenants. A malicious actor can obtain...

PT-2025-34677 · Unknown · Unified Pam

Name of the Vulnerable Software and Affected Versions: Unified PAM server affected versions not specified Description: A path traversal vulnerability exists in the unauthenticated upload functionality. This allows a malicious actor to upload binaries and scripts to the server’s configuration and...

Securden Unified PAM 安全漏洞

Securden Unified PAM is a privileged access management software from Securden USA. A security vulnerability exists in Securden Unified PAM that stems from shared infrastructure and access tokens that could lead to low privilege access...

Securden Unified PAM 安全漏洞

Securden Unified PAM is a privileged access management software from Securden, Inc. A security vulnerability exists in Securden Unified PAM that stems from unauthenticated file upload functionality with path traversal, which could lead to remote code execution...

Securden Unified PAM 安全漏洞

Securden Unified PAM is a privileged access management software from Securden, Inc. A security vulnerability exists in Securden Unified PAM that stems from an unauthenticated file upload feature that could lead to malicious file uploads...

PT-2025-34676 · Unknown · File Upload

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: An unauthenticated unrestricted file upload vulnerability allows an attacker to upload malicious binaries and scripts to the server. Recommendations: At the moment, there is no information about a...

kernel security update

5.14.0-570.37.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

CVE-2025-27216

Multiple Incorrect Permission Assignment for Critical Resource in UISP Application may allow a malicious actor with certain permissions to escalate privileges...

HPESBNW04941 Rev. 1 - HPE Telco Unified OSS Console, Multiple Vulnerabilities

Potential Security Impact: Local: Arbitrary Code Execution; Remote: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Unified OSS Console 3.1.16 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-52434 |...

Malicious code in unified-shell-bootstrapper (npm)

The package unified-shell-bootstrapper was found to contain malicious code...

MAL-2025-27661 Malicious code in node-unified-login-url (npm)

The package node-unified-login-url was found to contain malicious code...

Malicious code in node-unified-login-url (npm)

The package node-unified-login-url was found to contain malicious code...

MAL-2025-37768 Malicious code in unified-shell-bootstrapper (npm)

The package unified-shell-bootstrapper was found to contain malicious code...

[SECURITY] Fedora 42 Update: open62541-1.4.13-1.fc42

open62541 is a C-based library linking with C++ projects is possible with all necessary tools to implement dedicated OPC UA clients and servers, or to integrate OPC UA-based communication into existing applications...

CVE-2025-25235

Server-Side Request Forgery SSRF in Omnissa Secure Email Gateway SEG in SEG prior to 2.32 running on Windows and SEG prior to 2503 running on UAG allows routing of network traffic such as HTTP requests to internal networks...

Cisco Unified Communications Manager IM & Presence Privilege Escalation (cisco-sa-imp-inf-disc-cUPKuA5n)

According to its self-reported version, Cisco Unified Communications Manager IM & Presence is affected by a privilege escalation vulnerability. - A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an authenticated, local attacker to elevate...

CVE-2025-25235

Server-Side Request Forgery SSRF in Omnissa Secure Email Gateway SEG in SEG prior to 2.32 running on Windows and SEG prior to 2503 running on UAG allows routing of network traffic such as HTTP requests to internal networks...

CVE-2025-25235

CVE-2025-25235 describes a Server-Side Request Forgery (SSRF) in Omnissa Secure Email Gateway (SEG). The vulnerability affects SEG on Windows prior to 2.32 and SEG on UAG prior to 2503, enabling an attacker to route internal-network traffic (e.g., HTTP requests) through the gateway. The CVSS 3.1 ...

CVE-2025-25235 Omnissa Secure Email Gateway (SEG) updates address Server-Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF in Omnissa Secure Email Gateway SEG in SEG prior to 2.32 running on Windows and SEG prior to 2503 running on UAG allows routing of network traffic such as HTTP requests to internal networks...