CVE Brief - August 24, 2025

Sunday, August 24, 2025 Archive

Archived Security Snapshot

Critical vulnerabilities, curated daily for security professionals

🎯 SSCV Profile

See how vulnerabilities affect your specific environment

CRS uses the System Security Context Vector (SSCV) Framework v1.0 to adjust CVSS scores based on your system's exposure level, network position, and business criticality. Learn more about SSCV Framework

Select your system profile:

Risk scores will be adjusted based on your selected environment

Archived Security Brief

This curated brief highlights 3 critical vulnerabilities and 15 high-priority updates requiring immediate attention.

18 total vulnerabilities disclosed in last 24 hours
WordPress ecosystem significantly impacted: 5 plugin/theme vulnerabilities

💡 Tip: Swipe CVE cards left to ⭐ star, right to ❌ remove

CISA Known Exploited Vulnerabilities

⚠️ CISA KEV URGENT

CVE-2020-25078

9.5

D-Link DCS-2530L and DCS-2670L Devices August 4, 2025

⏰ Federal Deadline: August 25, 2025 (2 days remaining)

D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability - Active in CISA KEV catalog.

CVSS Base 9.5

→

CRS Select profile

⚠️ CISA KEV URGENT

CVE-2020-25079

9.5

D-Link DCS-2530L and DCS-2670L Devices August 4, 2025

⏰ Federal Deadline: August 25, 2025 (2 days remaining)

D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability - Active in CISA KEV catalog.

CVSS Base 9.5

→

CRS Select profile

⚠️ CISA KEV URGENT

CVE-2022-40799

9.5

D-Link DNR-322L August 4, 2025

⏰ Federal Deadline: August 25, 2025 (2 days remaining)

D-Link DNR-322L Download of Code Without Integrity Check Vulnerability - Active in CISA KEV catalog.

CVSS Base 9.5

→

CRS Select profile

⚠️ CISA KEV

CVE-2025-8088

9.5

RARLAB WinRAR August 11, 2025

⏰ Federal Deadline: September 1, 2025 (9 days remaining)

RARLAB WinRAR Path Traversal Vulnerability - Active in CISA KEV catalog.

CVSS Base 9.5

→

CRS Select profile

⚠️ CISA KEV

CVE-2007-0671

9.5

Microsoft Office August 11, 2025

⏰ Federal Deadline: September 1, 2025 (9 days remaining)

Microsoft Office Excel Remote Code Execution Vulnerability - Active in CISA KEV catalog.

CVSS Base 9.5

→

CRS Select profile

⚠️ CISA KEV

CVE-2013-3893

9.5

Microsoft Internet Explorer August 11, 2025

⏰ Federal Deadline: September 1, 2025 (9 days remaining)

Microsoft Internet Explorer Resource Management Errors Vulnerability - Active in CISA KEV catalog.

CVSS Base 9.5

→

CRS Select profile

⚠️ CISA KEV

CVE-2025-54948

9.5 📝

Trend Micro Apex One August 17, 2025

⏰ Federal Deadline: September 7, 2025 (15 days remaining)

Trend Micro Apex One OS Command Injection Vulnerability - Active in CISA KEV catalog.

CVSS Base 9.5

→

CRS Select profile

⚠️ CISA KEV

CVE-2025-43300

9.5 📝

Apple iOS, iPadOS, and macOS August 20, 2025

⏰ Federal Deadline: September 10, 2025 (18 days remaining)

Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability - Active in CISA KEV catalog.

CVSS Base 9.5

→

CRS Select profile

Critical Vulnerabilities

CVE-2025-7642

9.8 📝

The Simpler Checkout plugin for WordPress is vulnerable to Authentication Bypass in versions Multiple Products Aug 23, 2025

The Simpler Checkout plugin for WordPress is vulnerable to Authentication Bypass in versions 0.7.0 to 1.1.9. This is due to the plugin not properly verifying a user's identity prior to logging them in...

CVSS Base 9.8

→

CRS Select profile

CVE-2025-5821

9.8 📝

The Case Theme User plugin for WordPress is vulnerable to Authentication Bypass in all versions up Multiple Products Aug 23, 2025

The Case Theme User plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly logging a user in with the data that...

CVSS Base 9.8

→

CRS Select profile

CVE-2025-36157

9.8 📝

IBM Jazz Foundation Multiple Products Aug 24, 2025

IBM Jazz Foundation 7.0.2 to 7.0.2 iFix035, 7.0.3 to 7.0.3 iFix018, and 7.1.0 to 7.1.0 iFix004 could allow an unauthenticated remote attacker to update server property files that would allow them to p...

CVSS Base 9.8

→

CRS Select profile

High Priority Updates

CVE-2025-5060

8.1 📝

WordPress Multiple Products August 24, 2025

The Bravis User plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1

CVSS Base 8.1

→

CRS Select profile

CVE-2025-9048

8.1 📝

WordPress Multiple Products August 24, 2025

The Wptobe-memberships plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the del_img_ajax_call() function in all versions up to, and including, 3

CVSS Base 8.1

→

CRS Select profile

CVE-2025-7813

7.2 📝

WordPress Multiple Products August 24, 2025

The Events Calendar, Event Booking, Registrations and Event Tickets – Eventin plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4

CVSS Base 7.2

→

CRS Select profile

CVE-2025-9357

8.8 📝

Linksys Multiple Products August 24, 2025

A vulnerability was identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1

CVSS Base 8.8

→

CRS Select profile

CVE-2025-9358

8.8 📝

Linksys Multiple Products August 24, 2025

A security flaw has been discovered in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1

CVSS Base 8.8

→

CRS Select profile

CVE-2025-9359

8.8 📝

Linksys Multiple Products August 24, 2025

A weakness has been identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1

CVSS Base 8.8

→

CRS Select profile

CVE-2025-9360

8.8 📝

Linksys Multiple Products August 24, 2025

A security vulnerability has been detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1

CVSS Base 8.8

→

CRS Select profile

CVE-2025-9361

8.8 📝

Linksys Multiple Products August 24, 2025

A vulnerability was detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1

CVSS Base 8.8

→

CRS Select profile

CVE-2025-9363

8.8 📝

Linksys Multiple Products August 24, 2025

A vulnerability has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1

CVSS Base 8.8

→

CRS Select profile

CVE-2025-9392

8.8 📝

Linksys Multiple Products August 24, 2025

A security vulnerability has been detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1

CVSS Base 8.8

→

CRS Select profile

CVE-2025-9393

8.8 📝

Linksys Multiple Products August 24, 2025

A vulnerability was detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1

CVSS Base 8.8

→

CRS Select profile

CVE-2025-5352

8.1 📝

critical Multiple Products August 24, 2025

A critical stored Cross-Site Scripting (XSS) vulnerability exists in the Analytics component of lunary-ai/lunary versions up to 1

CVSS Base 8.1

→

CRS Select profile

CVE-2025-36174

8 📝

IBM Multiple Products August 24, 2025

IBM Integrated Analytics System 1

CVSS Base 8

→

CRS Select profile

CVE-2025-9380

7.8 📝

CCTV Multiple Products August 24, 2025

A vulnerability was identified in FNKvision Y215 CCTV Camera 10

CVSS Base 7.8

→

CRS Select profile

CVE-2025-9379

7.2 📝

was Multiple Products August 24, 2025

A vulnerability was determined in Belkin AX1800 1

CVSS Base 7.2

→

CRS Select profile

CVE Brief Security Intelligence

Archived Security Snapshot

🎯 SSCV Profile

Archived Security Brief

CISA Known Exploited Vulnerabilities

CVE-2020-25078

CVE-2020-25079

CVE-2022-40799

CVE-2025-8088

CVE-2007-0671

CVE-2013-3893

CVE-2025-54948

CVE-2025-43300

Critical Vulnerabilities

CVE-2025-7642

CVE-2025-5821

CVE-2025-36157

High Priority Updates

CVE-2025-5060

CVE-2025-9048

CVE-2025-7813

CVE-2025-9357

CVE-2025-9358

CVE-2025-9359

CVE-2025-9360

CVE-2025-9361

CVE-2025-9363

CVE-2025-9392

CVE-2025-9393

CVE-2025-5352

CVE-2025-36174

CVE-2025-9380

CVE-2025-9379

⭐ Starred CVEs

Archived Security Snapshot

🎯 SSCV Profile

📊 Archived Security Brief

Section Navigation

⚠️ CISA Known Exploited Vulnerabilities

🚨 Critical Vulnerabilities

⚠️ High Priority Updates

⭐ Starred CVEs

Archived Security Brief

CISA Known Exploited Vulnerabilities

Critical Vulnerabilities

High Priority Updates