November 2025
Published in November 2025
- criticalGitLab Patch Release: 18.6.1, 18.5.3, 18.4.5gitlab
- known exploitedCVE-2021-26829
- criticalGitLab Patch Release: 18.6.1, 18.5.3, 18.4.5gitlab
- known exploitedpublic exploitCVE-2025-11371
- unknownTrusted hosts bypass via SSHfortinet
- known exploitedpublic exploitCVE-2025-12480
- criticalexploitedCVE-2025-58034: Fortinet FortiWeb OS Command Injection Vulnerabilitycisa-kev
- known exploitedCVE-2025-13223
- criticalDrupal core - Moderately critical - Information disclosure - SA-CORE-2025-008drupal
- known exploitedpublic exploitCVE-2025-21042
- criticalDrupal core - Moderately critical - Defacement - SA-CORE-2025-007drupal
- known exploitedpublic exploitCVE-2025-48703
- criticalDrupal core - Moderately critical - Gadget chain - SA-CORE-2025-006drupal
- known exploitedpublic exploitCVE-2025-58034
- criticalDrupal core - Moderately critical - Denial of Service - SA-CORE-2025-005drupal
- known exploitedpublic exploitCVE-2025-61757
- criticalGitLab Patch Release: 18.5.2, 18.4.4, 18.3.6gitlab
- known exploitedpublic exploitCVE-2025-62215
- criticalGitLab Patch Release: 18.5.2, 18.4.4, 18.3.6gitlab
- known exploitedpublic exploitCVE-2025-64446
- criticalexploitedCVE-2025-62215: Microsoft Windows Race Condition Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-9242
- criticalexploitedCVE-2025-48703: CWP Control Web Panel OS Command Injection Vulnerabilitycisa-kev