CVE Vulnerability Advisory Database

[Affected Scope] Metro Development Server started by React Native Community CLI (binding to external interfaces by default)

[Impact] Unauthenticated network attackers can send a POST request to execute arbitrary executables, and run arbitrary shell commands with controlled arguments on Windows

[Mitigation] Upgrade React Native CLI to the patched version, restrict Metro server binding to localhost (127.0.0.1), and block external access via firewalls

[Affected Scope] Lanscope Endpoint Manager (On-Premises) Client program (MR) and Detection agent (DA)

[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges by sending specially crafted packets to the agent

[Mitigation] Immediately apply the official security patches provided by Motex and restrict network access to the agent communication ports

[Affected Scope] Virtual servers configured with a BIG-IP APM (Access Policy Manager) access policy

[Impact] Unauthenticated remote attackers can execute arbitrary code (RCE) with high privileges by sending specially crafted malicious network traffic

[Mitigation] Immediately apply the latest security patches provided by F5, and restrict access to APM virtual servers until patched

[Affected Scope] All Windows Server environments running Windows Server Update Services (WSUS).

[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM privileges over the network by sending malicious serialized payloads.

[Mitigation] Apply the official Microsoft security patches immediately, and restrict network access to WSUS ports (8530, 8531) to trusted internal networks.

[Affected Scope] All versions of Cisco IOS and Cisco IOS XE Software with active SNMP services

[Impact] Authenticated attackers can trigger a system reload (DoS) or execute arbitrary code with root privileges (RCE) via crafted SNMP packets

[Mitigation] Apply official Cisco software updates immediately, restrict SNMP access via ACLs, or disable unused SNMP services

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 140.0.7339.185

[Impact] Remote attackers can execute arbitrary code (RCE) and trigger heap corruption by enticing a user to visit a specially crafted HTML page

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (140.0.7339.185 or higher)

[Affected Scope] SolarWinds Web Help Desk (WHD) versions 12.8.3 Hotfix 3 and prior

[Impact] Unauthenticated remote attackers can execute arbitrary commands with system privileges on the host machine by sending specially crafted serialized data

[Mitigation] Immediately upgrade to SolarWinds Web Help Desk 12.8.7 Hotfix 1 or later as recommended by the vendor advisory

[Affected Scope] Control Web Panel (CWP, formerly CentOS Web Panel) versions prior to 0.9.8.1205

[Impact] Unauthenticated remote attackers can execute arbitrary code (RCE) on the target server by injecting shell metacharacters into the 't_total' parameter of a 'changePerm' request, provided a valid non-root username is known

[Mitigation] Immediately upgrade CWP to version 0.9.8.1205 or higher, and restrict access to the CWP management ports using firewall rules

[Affected Scope] License Servlet component of Fortra GoAnywhere MFT

[Impact] Unauthenticated attackers with a validly forged license response signature can deserialize arbitrary objects, potentially leading to remote command injection and full system compromise

[Mitigation] Immediately apply the official security patches provided by Fortra and restrict external access to the license servlet interfaces

[Affected Scope] WatchGuard Firebox appliances running Fireware OS with IKEv2 Mobile User VPN or Branch Office VPN (BOVPN) configured with a dynamic gateway peer (including legacy configurations where static peers remain active)

[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges by sending specially crafted IKEv2 packets, leading to complete compromise of the appliance

[Mitigation] Immediately upgrade to the patched Fireware OS version, or temporarily disable IKEv2 VPN services and restrict access to trusted IP addresses

[Affected Scope] Linux systems utilizing in-kernel TLS (ktls) offload or software implementation.

[Impact] Remote attackers can trigger memory corruption or kernel panic, potentially leading to full system compromise (RCE).

[Mitigation] Immediately update the Linux kernel to the latest stable version provided by your distribution.

[Affected Scope] End-of-Life (EOL) TP-Link Archer C7(EU) V2 (prior to 241108) and TL-WR841N/ND(MS) V9 (prior to 241108) routers.

[Impact] Authenticated attackers can execute arbitrary system commands and gain full control of the device via the Parental Control configuration page.

[Mitigation] Since these products are EOL, purchasing new supported hardware is highly recommended; otherwise, apply the emergency patch immediately and restrict management access.

[Affected Scope] FreePBX endpoint module versions 15, 16, and 17

[Impact] Unauthenticated remote attackers can bypass authentication, manipulate the database, and execute arbitrary code with administrator privileges

[Mitigation] Immediately upgrade the FreePBX endpoint module to patched versions (15.0.66, 16.0.89, or 17.0.3) and restrict administrator access

[Affected Scope] Citrix NetScaler ADC and NetScaler Gateway versions 13.1, 14.1, 13.1-FIPS, and NDcPP configured with Gateway/AAA virtual servers, IPv6-bound HTTP/SSL/HTTP_QUIC LB virtual servers, or HDX-type CR virtual servers

[Impact] Unauthenticated remote attackers can trigger a memory overflow by sending crafted network packets, leading to Remote Code Execution (RCE) or complete Denial of Service (DoS) of the appliance

[Mitigation] Immediately upgrade to the patched versions recommended in Citrix Advisory CTX694938, restrict external access, and audit system logs for indicators of compromise

[Affected Scope] N-able N-central versions prior to 2025.3.1

[Impact] An authenticated attacker with low privileges can exploit improper input validation to execute arbitrary OS commands and fully compromise the system

[Mitigation] Immediately upgrade N-able N-central to version 2025.3.1 or later

[Affected Scope] WinRAR for Windows (versions prior to 7.02)

[Impact] Attackers can execute arbitrary code (RCE) by tricking users into extracting a specially crafted malicious archive file, which drops payloads into arbitrary system directories

[Mitigation] Immediately upgrade WinRAR to the latest secure version (7.02 or higher) and avoid extracting archives from untrusted sources

[Affected Scope] Adobe Experience Manager (AEM) versions 6.5.23 and earlier (specifically with Forms module and Struts DevMode enabled)

[Impact] Unauthenticated remote attackers can bypass security controls and execute arbitrary system commands or code with system privileges

[Mitigation] Apply the official Adobe APSB25-82 security patch immediately and disable Struts DevMode in production environments

[Affected Scope] Trend Micro Apex One (on-premise) management console

[Impact] A pre-authenticated remote attacker can upload malicious code and execute arbitrary commands with system privileges, leading to full server compromise

[Mitigation] Immediately apply the official security patch (KA-0020652) and restrict network access to the management console

[Affected Scope] Apple devices running Safari versions prior to 18.6, iOS/iPadOS prior to 18.6, macOS Sequoia prior to 15.6, tvOS prior to 18.6, visionOS prior to 2.6, and watchOS prior to 11.6

[Impact] Processing maliciously crafted web content may lead to memory corruption, potentially allowing remote attackers to execute arbitrary code (RCE) or cause a denial of service (DoS) on the target device

[Mitigation] Immediately apply the latest official security updates provided by Apple (Safari 18.6, iOS 18.6, macOS 15.6, etc.)

[Affected Scope] Laravel Livewire versions v3.0.0 up to and including v3.6.3

[Impact] Unauthenticated remote attackers can exploit the component hydration process to execute arbitrary system commands on the host server

[Mitigation] Immediately upgrade the Livewire package to the patched version v3.6.4 or later