September 2025
Published in September 2025
- criticalexploitedCVE-2025-10035: Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2020-24363
- criticalexploitedCVE-2025-20352: Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2021-21311
- criticalexploitedCVE-2025-32463: Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerabilitycisa-kev
- known exploitedCVE-2023-50224
- criticalGitLab Patch Release: 18.4.1, 18.3.3, 18.2.7gitlab
- known exploitedpublic exploitCVE-2025-10035
- criticalGitLab Patch Release: 18.4.1, 18.3.3, 18.2.7gitlab
- known exploitedpublic exploitCVE-2025-10585
- criticalexploitedCVE-2025-20333: Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FT…cisa-kev
- known exploitedpublic exploitCVE-2025-20333
- criticalexploitedCVE-2025-20362: Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FT…cisa-kev
- known exploitedpublic exploitCVE-2025-20352
- unknownexploited[Update] Multiple vulnerabilities in Cisco ASA and FTD (September 25, 2025)cert-fr-alerte
- known exploitedpublic exploitCVE-2025-20362
- unknownJenkins Security Advisory 2025-09-17jenkins
- known exploitedpublic exploitCVE-2025-32463
- criticalGitLab Patch Release: 18.3.2, 18.2.6, 18.1.6gitlab
- known exploitedpublic exploitCVE-2025-38352
- criticalGitLab Patch Release: 18.3.2, 18.2.6, 18.1.6gitlab
- known exploitedpublic exploitCVE-2025-48543
- criticalexploitedCVE-2025-53690: Sitecore Multiple Products Deserialization of Untrusted Data Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-5086
- unknownJenkins Security Advisory 2025-09-03jenkins
- known exploitedpublic exploitCVE-2025-53690
- criticalexploitedCVE-2025-9377: TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-55177
- criticalexploitedCVE-2023-50224: TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerabilitycisa-kev
- known exploitedCVE-2025-59689
- criticalexploitedCVE-2025-55177: Meta Platforms WhatsApp Incorrect Authorization Vulnerabilitycisa-kev
- known exploitedCVE-2025-9377
- criticalexploitedCVE-2020-24363: TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerabilitycisa-kev