A memory-corruption bug in Apple’s CoreGraphics image-parsing framework lets a crafted file trigger arbitrary code execution on iPhones, iPads and Macs, with a known targeted-exploitation report.
Every CISA KEV addition, plus critical-severity flaws in the kit that sits at the edge of a network: firewalls, VPN gateways, load balancers, routers, switches and management consoles.
Colour on the left of each entry is the CVSS severity. A pink CISA KEV badge means the flaw is being exploited right now — treat those first, whatever the score says. How each post is sourced and checked is set out in the methodology.
Citrix NetScaler Improper Input Validation Vulnerability
An unauthenticated attacker can run arbitrary commands on NetScaler ADC and Gateway devices below the listed fixed builds, and CISA confirms this is already being exploited in the wild.
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
An unauthenticated, network-reachable memory buffer flaw in NetScaler ADC and Gateway can crash the appliance or let an attacker run code on it, and it’s already being exploited in the wild.
Microsoft SharePoint Code Injection Vulnerability
A logged-in SharePoint user with only basic privileges can send a crafted request that triggers code execution on the server, and attackers are already doing this.
Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
Mikrotik RouterOS contains an improper enforcement of behavioral workflow vulnerability that could allow an unauthenticated client to open a session channel and send an exec request. This …
WordPress Core Remote File Inclusion Vulnerability
An unauthenticated attacker can trick WordPress’s page-template lookup into loading a readable PHP file from outside the active theme, potentially leading to remote code execution on the server.
Adobe Commerce and Magento Incorrect Authorization Vulnerability
An unauthenticated attacker can bypass an authorization check in Adobe Commerce and Magento to read or alter sensitive data, no login or user action needed, and it’s already being exploited.
WSO2 Multiple Products Path Traversal Vulnerability
A flaw in how WSO2’s API gateway and control plane products validate JWT signing algorithms lets an attacker forge a token and walk in as an administrator, no login required.
Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
An unauthenticated attacker can reach on-prem VeloCloud Orchestrator over the network and gain privileged access to the host, putting the whole SD-WAN management plane at risk.
Check Point Multiple Products Improper Certificate Validation Vulnerability
A flawed certificate check during VPN handshakes on Check Point Security Gateway and Spark Firewall lets an unauthenticated attacker on the network run arbitrary code on the Gateway itself.