CVE Vulnerability Advisory Database

[Affected Scope] Apple devices running iOS < 18.4.1, iPadOS < 18.4.1, macOS Sequoia < 15.4.1, tvOS < 18.4.1, and visionOS < 2.4.1

[Impact] Attackers with arbitrary read/write capabilities can bypass hardware-level Pointer Authentication (PAC) to execute arbitrary code with kernel privileges

[Mitigation] Immediately apply the official security updates released by Apple (iOS 18.4.1, macOS 15.4.1, etc.)

[Affected Scope] Apple iOS and iPadOS prior to 18.4.1, macOS Sequoia prior to 15.4.1, tvOS prior to 18.4.1, visionOS prior to 2.4.1, and watchOS prior to 11.5

[Impact] Processing a maliciously crafted media file containing an audio stream may lead to arbitrary remote code execution (RCE) on the target system

[Mitigation] Immediately apply the official software updates provided by Apple to patch the vulnerability

[Affected Scope] Yii 2 framework versions prior to 2.0.52

[Impact] Remote attackers can execute arbitrary PHP code on the server and fully compromise the system via specially crafted requests.

[Mitigation] Immediately upgrade the Yii2 framework to the patched version 2.0.52 or higher.

[Affected Scope] Langflow versions prior to 1.3.0

[Impact] A remote, unauthenticated attacker can execute arbitrary Python code and fully compromise the host system by sending crafted HTTP requests.

[Mitigation] Immediately upgrade Langflow to version 1.3.0 or later, and restrict external access to the vulnerable endpoint.

[Affected Scope] CrushFTP 10 before 10.8.4 and CrushFTP 11 before 11.3.1

[Impact] Unauthenticated attackers can bypass authentication via HTTP(S) ports to take over the 'crushadmin' account and fully compromise the system

[Mitigation] Immediately upgrade CrushFTP to version 10.8.4 / 11.3.1 or later, and enforce DMZ proxy configurations

[Affected Scope] Gladinet CentreStack versions through 16.1.10296.56315

[Impact] Unauthenticated remote code execution (RCE) via deserialization of malicious payloads using the hardcoded machineKey, actively exploited in the wild

[Mitigation] Immediately upgrade to version 16.4.10315.56368 or later, or manually delete/rotate the hardcoded machineKey in the portal web.config file

[Affected Scope] Ivanti Connect Secure (before 22.7R2.6), Policy Secure (before 22.7R1.4), and ZTA Gateways (before 22.8R2.2)

[Impact] Unauthenticated remote attackers can trigger a stack-based buffer overflow to execute arbitrary code with root privileges on the target gateway

[Mitigation] Immediately apply the official security patches provided by the vendor and restrict access to external-facing management interfaces

[Affected Scope] Kentico Xperience through version 13.0.178 with Staging Sync Server enabled

[Impact] Unauthenticated attackers can bypass authentication to control administrative objects, leading to full Remote Code Execution (RCE)

[Mitigation] Apply the official Kentico hotfix immediately and restrict external access to the Staging Sync Server endpoint

[Affected Scope] Kentico Xperience versions up to and including 13.0.172

[Impact] Attackers can bypass authentication to gain administrative control, potentially leading to full system compromise and Remote Code Execution (RCE)

[Mitigation] Apply the official hotfix immediately, or restrict access to the Staging Sync Server endpoint via IP whitelisting

[Affected Scope] Devices running iOS 15/16/17/18, iPadOS, macOS Sequoia, visionOS, watchOS, and Safari browser

[Impact] Processing maliciously crafted web content may allow an attacker to break out of the Web Content sandbox and execute arbitrary code, with active exploitation reported in targeted attacks

[Mitigation] Immediately apply the official security updates released by Apple, including iOS 18.3.2 and macOS 15.3.2

[Affected Scope] Bare-metal servers and Baseboard Management Controller (BMC) devices utilizing AMI (American Megatrends International) SPx firmware.

[Impact] Unauthenticated remote attackers can bypass authentication via the Redfish Host Interface, leading to complete server takeover, data exfiltration, or permanent hardware destruction (bricking).

[Mitigation] Immediately apply the latest BMC firmware patches provided by your server OEM and restrict access to BMC management interfaces.

[Affected Scope] Apache Tomcat versions 11.0.0-M1 through 11.0.2, 10.1.0-M1 through 10.1.34, 9.0.0.M1 through 9.0.98, and EOL 8.5.0 through 8.5.100.

[Impact] Attackers can bypass path validation via internal dot path equivalence, allowing them to inject malicious content into sensitive files or trigger remote code execution (RCE) via session deserialization.

[Mitigation] Immediately upgrade to patched versions (11.0.3, 10.1.35, or 9.0.99) and ensure the Default Servlet's 'readonly' parameter is set to 'true'.

[Affected Scope] Edimax IC-7100 IP camera devices

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges and fully compromise the device by sending specially crafted HTTP requests

[Mitigation] Apply official vendor patches immediately, or restrict management interface access from the public internet and isolate the affected devices

[Affected Scope] XWiki Platform versions prior to 15.10.11, 16.4.1, and 16.5.0RC1

[Impact] Unauthenticated remote attackers can execute arbitrary Groovy code via the SolrSearch API, leading to complete compromise of the host system.

[Mitigation] Immediately upgrade to patched versions (15.10.11, 16.4.1, 16.5.0RC1 or later) or apply the recommended XML macro workaround.

[Affected Scope] Systems running unpatched versions impacted by CVE-2025-24989

[Impact] An improper access control vulnerability in Power Pages allows an unauthorized attacker to elevate privileges over a network potentially byp...

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] Palo Alto Networks PAN-OS software management web interface (excluding Cloud NGFW and Prisma Access)

[Impact] Unauthenticated remote attackers with network access can bypass authentication on the management interface and invoke sensitive PHP scripts, severely compromising system integrity and confidentiality

[Mitigation] Immediately upgrade to the patched PAN-OS versions and restrict access to the management interface to trusted internal IP addresses only

[Affected Scope] Wazuh server and cluster environments running versions 4.4.0 through 4.9.0

[Impact] Attackers with API access or compromised agents can execute arbitrary Python code on the Wazuh server by manipulating Distributed API (DAPI) parameters, leading to full system compromise

[Mitigation] Immediately upgrade Wazuh manager and cluster nodes to the patched version (v4.9.1 or higher) and restrict API access

[Affected Scope] Apple operating systems prior to iOS 18.3, iPadOS 18.3, macOS Sequoia 15.3, and other legacy versions

[Impact] A malicious application can exploit a Use-After-Free vulnerability to elevate privileges to system/kernel level and execute arbitrary code

[Mitigation] Immediately upgrade all affected Apple devices to the latest patched versions (iOS 18.3, macOS 15.3, etc.) via official software update channels

[Affected Scope] SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC)

[Impact] A remote unauthenticated attacker can exploit a deserialization of untrusted data vulnerability to execute arbitrary OS commands on the target system

[Mitigation] Immediately apply the official security patches provided by SonicWall and restrict external access to the management consoles

[Affected Scope] SimpleHelp remote support software v5.5.7 and earlier versions

[Impact] Low-privilege technician accounts can generate API keys with excessive permissions, leading to full server administrator privilege escalation

[Mitigation] Immediately upgrade to SimpleHelp v5.5.8 or later, and audit all existing API keys for unauthorized creation