CVE Vulnerability Advisory Database

[Affected Scope] WatchGuard Firebox appliances running Fireware OS with IKEv2 Mobile User VPN or Branch Office VPN (BOVPN) configured with a dynamic gateway peer (including legacy configurations where static peers remain active)

[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges by sending specially crafted IKEv2 packets, leading to complete compromise of the appliance

[Mitigation] Immediately upgrade to the patched Fireware OS version, or temporarily disable IKEv2 VPN services and restrict access to trusted IP addresses

[Affected Scope] Samsung Android mobile devices and the embedded libimagecodec.quram.so library prior to the SMR Sep-2025 Release 1 security patch

[Impact] Remote attackers can execute arbitrary code with high privileges without user interaction by tricking the system into processing a specially crafted image file

[Mitigation] Immediately apply the Samsung official software update (SMR Sep-2025 Release 1 or later) and restrict automatic downloading of media files from untrusted sources

[Affected Scope] Samsung Android mobile devices running security patch levels prior to SMR Apr-2025 Release 1

[Impact] Remote attackers can execute arbitrary code with high privileges and compromise the device without user interaction by triggering an out-of-bounds write during image decoding.

[Mitigation] Immediately apply the Samsung April 2025 Security Maintenance Release (SMR Apr-2025 Release 1) or later.

[Affected Scope] Adobe Commerce and Magento Open Source versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier

[Impact] Unauthenticated remote attackers can exploit this vulnerability to achieve session takeover and potential remote code execution (RCE) without user interaction

[Mitigation] Immediately apply the official Adobe security patches (APSB25-88) and restrict access to session management endpoints

[Affected Scope] Linux systems utilizing in-kernel TLS (ktls) offload or software implementation.

[Impact] Remote attackers can trigger memory corruption or kernel panic, potentially leading to full system compromise (RCE).

[Mitigation] Immediately update the Linux kernel to the latest stable version provided by your distribution.

[Affected Scope] Android Operating System and Chrome browser environments

[Impact] Local attackers can escape the Chrome sandbox and escalate privileges to system_server without any user interaction or additional execution privileges

[Mitigation] Immediately apply the Android Security Bulletin - September 2025 patch or later to all affected devices

[Affected Scope] Sitecore Experience Manager (XM) and Experience Platform (XP) versions up to and including 9.0

[Impact] Unauthenticated remote attackers can execute arbitrary code and fully compromise the host system via deserialization of untrusted data

[Mitigation] Immediately apply the official security patches from the vendor, or implement temporary workarounds such as enforcing ViewState encryption and restricting access

[Affected Scope] End-of-Life (EOL) TP-Link Archer C7(EU) V2 (prior to 241108) and TL-WR841N/ND(MS) V9 (prior to 241108) routers.

[Impact] Authenticated attackers can execute arbitrary system commands and gain full control of the device via the Parental Control configuration page.

[Mitigation] Since these products are EOL, purchasing new supported hardware is highly recommended; otherwise, apply the emergency patch immediately and restrict management access.

[Affected Scope] WhatsApp for iOS prior to v2.25.21.73, WhatsApp Business for iOS prior to v2.25.21.78, and WhatsApp for Mac prior to v2.25.21.78

[Impact] Unrelated attackers can bypass authorization to trigger the processing of arbitrary URL content on target devices, potentially leading to full device compromise when chained with OS-level exploits

[Mitigation] Immediately update WhatsApp and WhatsApp Business to the latest secure versions via the App Store and apply pending Apple OS security patches

[Affected Scope] FreePBX endpoint module versions 15, 16, and 17

[Impact] Unauthenticated remote attackers can bypass authentication, manipulate the database, and execute arbitrary code with administrator privileges

[Mitigation] Immediately upgrade the FreePBX endpoint module to patched versions (15.0.66, 16.0.89, or 17.0.3) and restrict administrator access

[Affected Scope] Citrix NetScaler ADC and NetScaler Gateway versions 13.1, 14.1, 13.1-FIPS, and NDcPP configured with Gateway/AAA virtual servers, IPv6-bound HTTP/SSL/HTTP_QUIC LB virtual servers, or HDX-type CR virtual servers

[Impact] Unauthenticated remote attackers can trigger a memory overflow by sending crafted network packets, leading to Remote Code Execution (RCE) or complete Denial of Service (DoS) of the appliance

[Mitigation] Immediately upgrade to the patched versions recommended in Citrix Advisory CTX694938, restrict external access, and audit system logs for indicators of compromise

[Affected Scope] Apple devices running iOS/iPadOS versions prior to 15.8.5, 16.7.12, 18.6.2, iPadOS 17.7.10, or macOS versions prior to Sequoia 15.6.1, Sonoma 14.7.8, and Ventura 13.7.8

[Impact] Processing a maliciously crafted image file may lead to memory corruption, allowing remote attackers to execute arbitrary code or gain full system control without user interaction

[Mitigation] Immediately apply the official security patches provided by Apple (iOS 15.8.5, 16.7.12, 18.6.2, iPadOS 17.7.10, macOS 15.6.1, etc.)

[Affected Scope] N-able N-central versions prior to 2025.3.1

[Impact] An authenticated attacker with low privileges can exploit improper input validation to execute arbitrary OS commands and fully compromise the system

[Mitigation] Immediately upgrade N-able N-central to version 2025.3.1 or later

[Affected Scope] N-able N-central versions prior to 2025.3.1

[Impact] Local attackers can execute arbitrary code and potentially compromise the entire management server

[Mitigation] Immediately upgrade N-able N-central to version 2025.3.1 or later

[Affected Scope] WinRAR for Windows (versions prior to 7.02)

[Impact] Attackers can execute arbitrary code (RCE) by tricking users into extracting a specially crafted malicious archive file, which drops payloads into arbitrary system directories

[Mitigation] Immediately upgrade WinRAR to the latest secure version (7.02 or higher) and avoid extracting archives from untrusted sources

[Affected Scope] Adobe Experience Manager (AEM) versions 6.5.23 and earlier (specifically with Forms module and Struts DevMode enabled)

[Impact] Unauthenticated remote attackers can bypass security controls and execute arbitrary system commands or code with system privileges

[Mitigation] Apply the official Adobe APSB25-82 security patch immediately and disable Struts DevMode in production environments

[Affected Scope] Trend Micro Apex One (on-premise) management console

[Impact] A pre-authenticated remote attacker can upload malicious code and execute arbitrary commands with system privileges, leading to full server compromise

[Mitigation] Immediately apply the official security patch (KA-0020652) and restrict network access to the management console

[Affected Scope] DELMIA Apriso from Release 2020 through Release 2025

[Impact] Unauthenticated remote attackers can bypass authorization checks to gain privileged access to the application

[Mitigation] Apply official security patches immediately, restrict external access, and enforce IP-based access control lists

[Affected Scope] Systems running unpatched versions impacted by CVE-2025-6204

[Impact] An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 coul...

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] Apple devices running Safari versions prior to 18.6, iOS/iPadOS prior to 18.6, macOS Sequoia prior to 15.6, tvOS prior to 18.6, visionOS prior to 2.6, and watchOS prior to 11.6

[Impact] Processing maliciously crafted web content may lead to memory corruption, potentially allowing remote attackers to execute arbitrary code (RCE) or cause a denial of service (DoS) on the target device

[Mitigation] Immediately apply the latest official security updates provided by Apple (Safari 18.6, iOS 18.6, macOS 15.6, etc.)