Critical vulnerabilities, curated daily for security professionals
Monday's security landscape reveals 6 critical vulnerabilities, a 100% increase from Sunday's 3 critical disclosures. High-priority CVEs decreased 13% to 46, indicating a shift toward more severe findings. The 11 actively exploited vulnerabilities remain unchanged, with notable entries targeting Android Framework, Microsoft Windows, WinRAR, and GeoServer. Critical findings include multiple Shiguangwu sgwbox vulnerabilities (CVE-2025-14707, CVE-2025-14708, CVE-2025-14709) all scoring CVSS 9.8, alongside Tenda product flaws. Patch availability stands at 0%, requiring organizations to implement compensating controls until vendor updates become available.
Immediate action: Prioritize network segmentation and access restrictions for affected Shiguangwu sgwbox devices, Tenda products, and systems running Android Framework, WinRAR, or GeoServer. With zero patches currently available, implement web application firewalls, disable unnecessary services, and enhance monitoring for exploitation indicators. Monday staffing should account for assessing exposure to the actively exploited vulnerabilities across infrastructure.
CVSS score (e.g. 9.1) — severity from 0–10. Red marks critical (9+), orange high (7–8.9).
Exploitability — how hard the flaw is to attack, read from the CVSS vector:
The lower the bar on all three, the easier to exploit at scale — “Network · No privileges · No interaction” is the worst case: hit from anywhere, no credentials, no victim action.
🔴 Actively exploited — confirmed under attack in the wild (CISA’s Known Exploited Vulnerabilities catalog). Prioritize these regardless of score.
EPSS · Nth percentile — FIRST.org’s estimated chance a flaw is exploited within 30 days. We flag it only in the top 10% — a statistical signal it’s unusually likely to be targeted, separate from whether attacks are confirmed.
OpenPLC ScadaBR Cross-site Scripting Vulnerability - Active in CISA KEV catalog.
Android Framework Information Disclosure Vulnerability - Active in CISA KEV catalog.
Android Framework Privilege Escalation Vulnerability - Active in CISA KEV catalog.
OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability - Active in CISA KEV catalog.
D-Link Routers Buffer Overflow Vulnerability - Active in CISA KEV catalog.
Array Networks ArrayOS AG OS Command Injection Vulnerability - Active in CISA KEV catalog.
RARLAB WinRAR Path Traversal Vulnerability - Active in CISA KEV catalog.
Microsoft Windows Use After Free Vulnerability - Active in CISA KEV catalog.
OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability - Active in CISA KEV catalog.
Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability - Active in CISA KEV catalog.
Google Chromium Out of Bounds Memory Access Vulnerability - Active in CISA KEV catalog.
A security flaw has been discovered in Shiguangwu sgwbox N3 2.0.25. Affected is an unknown function of the file /usr/sbin/http_eshell_server of the component DOCKER Feature. Performing manipulation of the argument params results in command injection. The attack may be initiated remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
A security flaw has been discovered in Tenda WH450 1.0.0.18. Impacted is an unknown function of the file /goform/DhcpListClient of the component HTTP Request Handler. The manipulation of the argument page results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been released to the public and may be exploited.
A weakness has been identified in Shiguangwu sgwbox N3 2.0.25. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/http_eshell_server of the component WIREDCFGGET Interface. Executing manipulation of the argument params can lead to buffer overflow. The attack may be launched remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
A security vulnerability has been detected in Shiguangwu sgwbox N3 2.0.25. Affected by this issue is some unknown functionality of the file /usr/sbin/http_eshell_server of the component WIRELESSCFGGET Interface. The manipulation of the argument params leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
A vulnerability was determined in Shiguangwu sgwbox N3 2.0.25. This affects an unknown function of the component SHARESERVER Feature. This manipulation of the argument params causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
A vulnerability was identified in Shiguangwu sgwbox N3 2.0.25. This impacts an unknown function of the file /usr/sbin/http_eshell_server of the component NETREBOOT Interface. Such manipulation leads to command injection. The attack can be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
The Doubly – Cross Domain Copy Paste for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1
The افزونه پیامک ووکامرس فوق حرفه ای (جدید) payamito sms woocommerce plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'columns' parameter in all versions up to, and including, 1
The Postem Ipsum plugin for WordPress is vulnerable to unauthorized modification of data to Privilege Escalation due to a missing capability check on the postem_ipsum_generate_users() function in all versions up to, and including, 3
The WP Directory Kit plugin for WordPress is vulnerable to SQL Injection via the 'hide_fields' and the 'attr_search' parameter in all versions up to, and including, 1
The wpForo Forum plugin for WordPress is vulnerable to generic SQL Injection via the `post_args` and `topic_args` parameters in all versions up to, and including, 2
The WP3D Model Import Viewer plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the handle_import_file() function in all versions up to, and including, 1
The Extensive VC Addons for WPBakery page builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1
LINE client for iOS prior to 15
The vulnerability arises when a client fetches a tools’ JSON specification, known as a Manual, from a remote Manual Endpoint
Student Learning Assessment and Support System developed by JHENG GAO has a Exposure of Sensitive Information vulnerability, allowing unauthenticated remote attackers to view a specific page and obtain test accounts and password
A vulnerability was identified in Tenda AC20 16
A security flaw has been discovered in Tenda AC20 16
A weakness has been identified in Tenda AC20 16
A vulnerability was detected in D-Link DIR-860LB1 and DIR-868LB1 203b01/203b03
NXLog Agent before 6
A vulnerability was identified in itsourcecode Online Pet Shop Management System 1
A security flaw has been discovered in itsourcecode Student Management System 1
A security vulnerability has been detected in code-projects Prison Management System 2
A vulnerability was found in code-projects Student File Management System 1
A vulnerability was determined in code-projects Student File Management System 1
A vulnerability was identified in code-projects Student File Management System 1
A security flaw has been discovered in code-projects Student File Management System 1
A weakness has been identified in code-projects Student File Management System 1
A weakness has been identified in itsourcecode Online Pet Shop Management System 1
A security vulnerability has been detected in itsourcecode Online Pet Shop Management System 1
A vulnerability was detected in itsourcecode Student Management System 1
A flaw has been found in code-projects Student File Management System 1
A vulnerability was found in code-projects Simple Attendance Record System 2
A vulnerability was determined in itsourcecode Student Management System 1
A vulnerability was identified in code-projects Student File Management System 1
A security flaw has been discovered in code-projects Student File Management System 1
A weakness has been identified in code-projects Computer Book Store 1
A vulnerability was detected in itsourcecode Online Cake Ordering System 1
A flaw has been found in itsourcecode Online Cake Ordering System 1
A vulnerability was found in itsourcecode Online Cake Ordering System 1
A vulnerability was determined in itsourcecode Student Management System 1
A vulnerability has been found in itsourcecode Student Managemen System 1
A vulnerability was identified in Campcodes Supplier Management System 1
A weakness has been identified in itsourcecode COVID Tracking System 1
A security vulnerability has been detected in itsourcecode COVID Tracking System 1
A vulnerability was detected in campcodes Advanced Online Examination System 1
A flaw has been found in gmg137 snap7-rs up to 1
A vulnerability has been found in gmg137 snap7-rs up to 1
A vulnerability was found in Shiguangwu sgwbox N3 2
A vulnerability was detected in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0
A flaw has been found in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0