CVE Vulnerability Advisory Database

[Affected Scope] All versions of Cisco Secure Email Gateway with Advanced Malware Protection (AMP) and File Reputation service enabled.

[Impact] An unauthenticated remote attacker can overwrite system files and execute arbitrary commands with root privileges by sending a crafted email attachment.

[Mitigation] Immediately apply the official AsyncOS security patches provided by Cisco. If patching is not possible, disable the AMP File Reputation feature as a temporary workaround.

[Affected Scope] FortiMail versions 8.0.0-8.0.1, 7.6.0-7.6.6, 7.4.0-7.4.8, 7.2.0-7.2.9, and all 7.0 versions.

[Impact] Unauthenticated remote attackers can write arbitrary files via crafted HTTP/HTTPS requests, leading to full system compromise and Remote Code Execution (RCE).

[Mitigation] Immediately upgrade to patched firmware versions (8.0.2, 7.6.7, etc.) and restrict access to administrative interfaces.

[Affected Scope] GitLab CE/EE versions from 18.7 through 19.3.1.

[Impact] Unauthenticated remote attackers can read arbitrary files from the server, potentially leading to full system compromise and credential theft.

[Mitigation] Immediate upgrade to patched versions: 18.11.12, 19.0.9, 19.1.8, 19.2.6, or 19.3.2.

[Affected Scope] JFrog Artifactory Self-Managed instances under specific remote-repository conditions

[Impact] An authenticated attacker can write data outside the intended Docker cache path, potentially compromising system integrity

[Mitigation] Immediately upgrade JFrog Artifactory to the latest patched version and restrict untrusted remote repository configurations

[Affected Scope] Adobe ColdFusion versions 2025.9, 2023.20 and earlier

[Impact] Unauthenticated remote attackers can execute arbitrary code in the context of the current user, with active exploitation confirmed in the wild

[Mitigation] Immediately apply the official Adobe security patches (APSB26-68) and restrict access to sensitive endpoints

[Affected Scope] Web UI and API endpoints of Cisco Catalyst SD-WAN Manager (formerly SD-WAN vManage)

[Impact] An authenticated remote attacker can create or overwrite arbitrary files on the filesystem, potentially leading to root privilege escalation

[Mitigation] Immediately apply the official Cisco security patches and monitor unauthorized API requests and file upload activities

[Affected Scope] All Ubiquiti UniFi OS devices accessible via the network.

[Impact] Unauthenticated attackers can exploit a Path Traversal (CWE-22) vulnerability to access and manipulate underlying system files, leading to complete takeover of system accounts.

[Mitigation] Immediately apply the official security patches provided by Ubiquiti and restrict external network access to the UniFi OS management interface.

[Affected Scope] Major Fortinet solutions including FortiOS (6.4-7.6), FortiPAM (1.0-1.7), FortiProxy (7.0-7.6), and FortiSwitchManager (7.0-7.2).

[Impact] Authenticated attackers with administrative privileges can write or delete arbitrary system files via specific CLI commands, leading to system compromise or persistence.

[Mitigation] Immediately upgrade to the latest patched firmware versions and strictly enforce IP-based access control for administrative CLI access.

[Affected Scope] All active deployments of Gogs Git service utilizing the vulnerable PutContents API.

[Impact] An authenticated attacker with low privileges can exploit improper symbolic link validation to overwrite arbitrary system files, leading to Remote Code Execution (RCE).

[Mitigation] Immediately upgrade Gogs to the latest patched version and restrict repository creation and write permissions for untrusted users.

[Affected Scope] Fortinet FortiWeb versions 8.0.0 through 8.0.1, 7.6.0 through 7.6.4, 7.4.0 through 7.4.9, 7.2.0 through 7.2.11, and 7.0.0 through 7.0.11

[Impact] Unauthenticated remote attackers can execute arbitrary administrative commands on the system via crafted HTTP or HTTPS requests

[Mitigation] Immediately upgrade to the official patched versions (8.0.2, 7.6.5, 7.4.10, 7.2.12, 7.0.12 or higher)

[Affected Scope] WinRAR for Windows (versions prior to 7.02)

[Impact] Attackers can execute arbitrary code (RCE) by tricking users into extracting a specially crafted malicious archive file, which drops payloads into arbitrary system directories

[Mitigation] Immediately upgrade WinRAR to the latest secure version (7.02 or higher) and avoid extracting archives from untrusted sources

[Affected Scope] All Wing FTP Server installations running versions prior to 7.4.4

[Impact] Attackers can disclose the full local installation path of the application by supplying an excessively long value in the UID cookie, facilitating subsequent targeted attacks

[Mitigation] Immediately upgrade Wing FTP Server to version 7.4.4 or later, and deploy WAF rules to restrict anomalous cookie lengths in the interim

[Affected Scope] Samsung MagicINFO 9 Server versions prior to 21.1052

[Impact] Unauthenticated remote attackers can exploit path traversal to write arbitrary files with system authority, leading to Remote Code Execution (RCE)

[Mitigation] Immediately upgrade MagicINFO 9 Server to version 21.1052 or later and restrict external access

[Affected Scope] Commvault Command Center Innovation Release versions 11.38.0 through 11.38.20.

[Impact] Unauthenticated remote attackers can upload malicious ZIP installation packages to execute arbitrary code (RCE) via path traversal and JSP web shell deployment.

[Mitigation] Immediately upgrade to patched versions: 11.38.20 with SP38-CU20-433/436 or 11.38.25 with SP38-CU25-434/438 or higher.

[Affected Scope] Kentico Xperience through version 13.0.178

[Impact] Authenticated attackers can exploit the Staging Sync Server to upload arbitrary files to relative paths, leading to server-side execution and full Remote Code Execution (RCE)

[Mitigation] Apply the official Kentico hotfix immediately and restrict access to the Staging Sync Server endpoints

[Affected Scope] NAKIVO Backup & Replication versions prior to 11.0.0.88174

[Impact] Unauthenticated remote attackers can exploit absolute path traversal to read arbitrary system files, potentially leading to enterprise-wide Remote Code Execution (RCE) due to cleartext credentials stored in PhysicalDiscovery.

[Mitigation] Immediately upgrade NAKIVO Backup & Replication to version 11.0.0.88174 or later and restrict external access.

[Affected Scope] SimpleHelp remote support software v5.5.7 and prior

[Impact] Unauthenticated remote attackers can download arbitrary sensitive files, including server configuration files, secrets, and hashed user credentials, via crafted HTTP requests

[Mitigation] Immediately upgrade to SimpleHelp v5.5.8 or later, and restrict external access to the console until patched

[Affected Scope] Ivanti EPM versions prior to the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update

[Impact] Remote unauthenticated attackers can exploit absolute path traversal to leak highly sensitive system information

[Mitigation] Immediately apply the official Ivanti security updates and restrict access to the EPM management interfaces

[Affected Scope] Ivanti EPM 2024 prior to the January 2025 Security Update, and EPM 2022 SU6 prior to the January 2025 Security Update

[Impact] A remote unauthenticated attacker can exploit an absolute path traversal vulnerability to leak highly sensitive system information and credentials

[Mitigation] Immediately apply the official Ivanti January 2025 Security Update and restrict access to the EPM management console

[Affected Scope] NuPoint Unified Messaging (NPM) component within Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201)

[Impact] Unauthenticated remote attackers can exploit insufficient input validation to perform path traversal, allowing unauthorized access to view, corrupt, or delete user data and system configurations

[Mitigation] Immediately upgrade to the latest patched version provided by the vendor, and restrict external access to management interfaces