August 2025
Published in August 2025
- criticalexploitedCVE-2025-57819: Sangoma FreePBX Authentication Bypass Vulnerabilitycisa-kev
- known exploitedCVE-2007-0671
- criticalGitLab Patch Release: 18.3.1, 18.2.5, 18.1.5gitlab
- known exploitedpublic exploitCVE-2013-3893
- criticalGitLab Patch Release: 18.3.1, 18.2.5, 18.1.5gitlab
- known exploitedpublic exploitCVE-2020-25078
- unknownexploitedVulnerability in Citrix NetScaler ADC and NetScaler Gateway (August 26, 2025)cert-fr-alerte
- known exploitedCVE-2020-25079
- criticalexploitedCVE-2024-8069: Citrix Session Recording Deserialization of Untrusted Data Vulnerabilitycisa-kev
- known exploitedCVE-2022-40799
- criticalexploitedCVE-2024-8068: Citrix Session Recording Improper Privilege Management Vulnerabilitycisa-kev
- known exploitedCVE-2024-40766
- unknownGitLab Patch Release: 18.2.4gitlab
- known exploitedCVE-2024-8068
- unknownGitLab Patch Release: 18.2.4gitlab
- known exploitedpublic exploitCVE-2024-8069
- criticalexploitedCVE-2025-54948: Trend Micro Apex One OS Command Injection Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-43300
- unknownGitLab Patch Release: 17.11.7gitlab
- known exploitedpublic exploitCVE-2025-48384
- unknownGitLab Patch Release: 17.11.7gitlab
- known exploitedCVE-2025-54948
- criticalGitLab Patch Release: 18.2.2, 18.1.4, 18.0.6gitlab
- known exploitedpublic exploitCVE-2025-57819
- criticalGitLab Patch Release: 18.2.2, 18.1.4, 18.0.6gitlab
- known exploitedpublic exploitCVE-2025-7775
- criticalexploitedCVE-2013-3893: Microsoft Internet Explorer Resource Management Errors Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-8088
- criticalexploitedCVE-2007-0671: Microsoft Office Excel Remote Code Execution Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-8875
- criticalexploitedCVE-2025-8088: RARLAB WinRAR Path Traversal Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-8876
- unknownexploitedSecurity incidents in SonicWall firewalls (August 5, 2025)cert-fr-alerte
- criticalexploitedCVE-2022-40799: D-Link DNR-322L Download of Code Without Integrity Check Vulnerabilitycisa-kev
- criticalexploitedCVE-2020-25079: D-Link DCS-2530L and DCS-2670L Command Injection Vulnerabilitycisa-kev
- criticalexploitedCVE-2020-25078: D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerabilitycisa-kev