# CVEs published 2025-07-09

110 CVEs were published on July 9, 2025: 10 critical, 24 high. Days are UTC.

- [CVE-2025-0141](https://cve.now/CVE-2025-0141.md): GlobalProtect App: Privilege Escalation (PE) Vulnerability (CVSS 8.4, Palo Alto Networks GlobalProtect App · Palo Alto Networks G…)
- [CVE-2025-0140](https://cve.now/CVE-2025-0140.md): GlobalProtect App: Non Admin User Can Disable the GlobalProtect App (CVSS 6.8, Palo Alto Networks GlobalProtect App · Palo Alto Networks G…)
- [CVE-2025-0139](https://cve.now/CVE-2025-0139.md): Autonomous Digital Experience Manager: Privilege Escalation (PE) Vulnerability (CVSS 6.3, Palo Alto Networks Autonomous Digital Experience Manager)
- [CVE-2025-6976](https://cve.now/CVE-2025-6976.md): Events Manager \<= 7.0.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Plugin Shortcodes (CVSS 6.4, netweblogic Events Manager – Calendar, Bookings, Tickets, a…)
- [CVE-2025-6975](https://cve.now/CVE-2025-6975.md): Event Manager \<= 7.0.3 - Reflected Cross-Site Scripting via \`calendar\_header\` Parameter (CVSS 6.1, netweblogic Events Manager – Calendar, Bookings, Tickets, a…)
- [CVE-2025-6970](https://cve.now/CVE-2025-6970.md): Events Manager \<= 7.0.3 - Unauthenticated SQL Injection via \`orderby\` Parameter (CVSS 7.5, netweblogic Events Manager – Calendar, Bookings, Tickets, a…)
- [CVE-2025-53624](https://cve.now/CVE-2025-53624.md): docusaurus-plugin-content-gists Exposes GitHub Personal Access Token (CVSS 10.0, webbertakken docusaurus-plugin-content-gists · docusaurus-p…)
- [CVE-2025-6376](https://cve.now/CVE-2025-6376.md): Arena® Simulation Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.1, Rockwell Automation Arena®)
- [CVE-2025-6377](https://cve.now/CVE-2025-6377.md): Arena® Simulation Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.1, Rockwell Automation Arena®)
- [CVE-2025-53620](https://cve.now/CVE-2025-53620.md): Crashing any Qwik Server (CVSS 9.2, QwikDev qwik · @builder.io/qwik-city)
- [CVE-2025-36599](https://cve.now/CVE-2025-36599.md): Dell PowerFlex Manager VM, versions prior to 4.6.2.1, contains an Insertion of Sensitive Information into Log File vulnerability. (CVSS 4.3, Dell PowerFlex Manager VM)
- [CVE-2025-53548](https://cve.now/CVE-2025-53548.md): @clerk/backend Performs Insufficient Verification of Data Authenticity (CVSS 7.5, clerk javascript · @clerk/backend +8)
- [CVE-2025-53743](https://cve.now/CVE-2025-53743.md): Jenkins Applitools Eyes Plugin 1.16.5 and earlier does not mask Applitools API keys displayed on the job configuration form, increasing the (CVSS 5.3, Jenkins Project Jenkins Applitools Eyes Plugin · org.jenkin…)
- [CVE-2025-53742](https://cve.now/CVE-2025-53742.md): Jenkins Applitools Eyes Plugin 1.16.5 and earlier stores Applitools API keys unencrypted in job config.xml files on the Jenkins controller, (CVSS 6.5, Jenkins Project Jenkins Applitools Eyes Plugin · org.jenkin…)
- [CVE-2025-53678](https://cve.now/CVE-2025-53678.md): Jenkins User1st uTester Plugin 1.1 and earlier stores the uTester JWT token unencrypted in its global configuration file on the Jenkins cont (CVSS 6.5, Jenkins Project Jenkins User1st uTester Plugin · io.jenkins…)
- [CVE-2025-53677](https://cve.now/CVE-2025-53677.md): Jenkins Xooa Plugin 0.0.7 and earlier does not mask the Xooa Deployment Token on the global configuration form, increasing the potential for (CVSS 5.3, Jenkins Project Jenkins Xooa Plugin · io.jenkins.plugins:xo…)
- [CVE-2025-53676](https://cve.now/CVE-2025-53676.md): Jenkins Xooa Plugin 0.0.7 and earlier stores the Xooa Deployment Token unencrypted in its global configuration file on the Jenkins controlle (CVSS 6.5, Jenkins Project Jenkins Xooa Plugin · io.jenkins.plugins:xo…)
- [CVE-2025-53675](https://cve.now/CVE-2025-53675.md): Jenkins Warrior Framework Plugin 1.2 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller, where they (CVSS 6.5, Jenkins Project Jenkins Warrior Framework Plugin · org.jenk…)
- [CVE-2025-53674](https://cve.now/CVE-2025-53674.md): Jenkins Sensedia Api Platform tools Plugin 1.0 does not mask the Sensedia API Manager integration token on the global configuration form, in (CVSS 5.3, Jenkins Project Jenkins Sensedia Api Platform tools Plugin…)
- [CVE-2025-53673](https://cve.now/CVE-2025-53673.md): Jenkins Sensedia Api Platform tools Plugin 1.0 stores the Sensedia API Manager integration token unencrypted in its global configuration fil (CVSS 6.5, Jenkins Project Jenkins Sensedia Api Platform tools Plugin…)
- [CVE-2025-53672](https://cve.now/CVE-2025-53672.md): Jenkins Kryptowire Plugin 0.2 and earlier stores the Kryptowire API key unencrypted in its global configuration file on the Jenkins controll (CVSS 6.5, Jenkins Project Jenkins Kryptowire Plugin · io.jenkins.plug…)
- [CVE-2025-53671](https://cve.now/CVE-2025-53671.md): Jenkins Nouvola DiveCloud Plugin 1.08 and earlier does not mask DiveCloud API Keys and Credentials Encryption Keys displayed on the job conf (CVSS 6.5, Jenkins Project Jenkins Nouvola DiveCloud Plugin · org.jenk…)
- [CVE-2025-53670](https://cve.now/CVE-2025-53670.md): Jenkins Nouvola DiveCloud Plugin 1.08 and earlier stores DiveCloud API Keys and Credentials Encryption Keys unencrypted in job config.xml fi (CVSS 6.5, Jenkins Project Jenkins Nouvola DiveCloud Plugin · org.jenk…)
- [CVE-2025-53669](https://cve.now/CVE-2025-53669.md): Jenkins VAddy Plugin 1.2.8 and earlier does not mask Vaddy API Auth Keys displayed on the job configuration form, increasing the potential f (CVSS 4.3, Jenkins Project Jenkins VAddy Plugin · org.jenkins-ci.plugi…)
- [CVE-2025-53668](https://cve.now/CVE-2025-53668.md): Jenkins VAddy Plugin 1.2.8 and earlier stores Vaddy API Auth Keys unencrypted in job config.xml files on the Jenkins controller, where they (CVSS 6.5, Jenkins Project Jenkins VAddy Plugin · org.jenkins-ci.plugi…)
- [CVE-2025-53667](https://cve.now/CVE-2025-53667.md): Jenkins Dead Man's Snitch Plugin 0.1 does not mask Dead Man's Snitch tokens displayed on the job configuration form, increasing the potentia (CVSS 5.3, Jenkins Project Jenkins Dead Man's Snitch Plugin · org.jenk…)
- [CVE-2025-53666](https://cve.now/CVE-2025-53666.md): Jenkins Dead Man's Snitch Plugin 0.1 stores Dead Man's Snitch tokens unencrypted in job config.xml files on the Jenkins controller, where th (CVSS 6.5, Jenkins Project Jenkins Dead Man's Snitch Plugin · org.jenk…)
- [CVE-2025-53665](https://cve.now/CVE-2025-53665.md): Jenkins Apica Loadtest Plugin 1.10 and earlier does not mask Apica Loadtest LTP authentication tokens displayed on the job configuration for (CVSS 4.3, Jenkins Project Jenkins Apica Loadtest Plugin · com.apica:A…)
- [CVE-2025-53664](https://cve.now/CVE-2025-53664.md): Jenkins Apica Loadtest Plugin 1.10 and earlier stores Apica Loadtest LTP authentication tokens unencrypted in job config.xml files on the Je (CVSS 6.5, Jenkins Project Jenkins Apica Loadtest Plugin · com.apica:A…)
- [CVE-2025-53663](https://cve.now/CVE-2025-53663.md): Jenkins IBM Cloud DevOps Plugin 2.0.16 and earlier stores SonarQube authentication tokens unencrypted in job config.xml files on the Jenkins (CVSS 6.5, Jenkins Project Jenkins IBM Cloud DevOps Plugin · com.ibm.d…)
- [CVE-2025-53662](https://cve.now/CVE-2025-53662.md): Jenkins IFTTT Build Notifier Plugin 1.2 and earlier stores IFTTT Maker Channel Keys unencrypted in job config.xml files on the Jenkins contr (CVSS 6.5, Jenkins Project Jenkins IFTTT Build Notifier Plugin · org.j…)
- [CVE-2025-53661](https://cve.now/CVE-2025-53661.md): Jenkins Testsigma Test Plan run Plugin 1.6 and earlier does not mask Testsigma API keys displayed on the job configuration form, increasing (CVSS 4.3, Jenkins Project Jenkins Testsigma Test Plan run Plugin · io…)
- [CVE-2025-53660](https://cve.now/CVE-2025-53660.md): Jenkins QMetry Test Management Plugin 1.13 and earlier does not mask Qmetry Automation API Keys displayed on the job configuration form, inc (CVSS 4.3, Jenkins Project Jenkins QMetry Test Management Plugin · org…)
- [CVE-2025-53659](https://cve.now/CVE-2025-53659.md): Jenkins QMetry Test Management Plugin 1.13 and earlier stores Qmetry Automation API Keys unencrypted in job config.xml files on the Jenkins (CVSS 6.5, Jenkins Project Jenkins QMetry Test Management Plugin · org…)
- [CVE-2025-53658](https://cve.now/CVE-2025-53658.md): Jenkins Applitools Eyes Plugin 1.16.5 and earlier does not escape the Applitools URL on the build page, resulting in a stored cross-site scr (CVSS 5.4, Jenkins Project Jenkins Applitools Eyes Plugin · org.jenkin…)
- [CVE-2025-53657](https://cve.now/CVE-2025-53657.md): Jenkins ReadyAPI Functional Testing Plugin 1.11 and earlier does not mask SLM License Access Keys, client secrets, and passwords displayed o (CVSS 4.3, Jenkins Project Jenkins ReadyAPI Functional Testing Plugin…)
- [CVE-2025-53656](https://cve.now/CVE-2025-53656.md): Jenkins ReadyAPI Functional Testing Plugin 1.11 and earlier stores SLM License Access Keys, client secrets, and passwords unencrypted in job (CVSS 6.5, Jenkins Project Jenkins ReadyAPI Functional Testing Plugin…)
- [CVE-2025-53655](https://cve.now/CVE-2025-53655.md): Jenkins Statistics Gatherer Plugin 2.0.3 and earlier does not mask the AWS Secret Key on the global configuration form, increasing the poten (CVSS 5.3, Jenkins Project Jenkins Statistics Gatherer Plugin · org.je…)
- [CVE-2025-53654](https://cve.now/CVE-2025-53654.md): Jenkins Statistics Gatherer Plugin 2.0.3 and earlier stores the AWS Secret Key unencrypted in its global configuration file on the Jenkins c (CVSS 6.5, Jenkins Project Jenkins Statistics Gatherer Plugin · org.je…)
- [CVE-2025-53653](https://cve.now/CVE-2025-53653.md): Jenkins Aqua Security Scanner Plugin 3.2.8 and earlier stores Scanner Tokens for Aqua API unencrypted in job config.xml files on the Jenkins (CVSS 4.3, Jenkins Project Jenkins Aqua Security Scanner Plugin · org.…)
- [CVE-2025-53652](https://cve.now/CVE-2025-53652.md): Jenkins Git Parameter Plugin 439.vb\_0e46ca\_14534 and earlier does not validate that the Git parameter value submitted to the build matches o (CVSS 8.2, Jenkins Project Jenkins Git Parameter Plugin · org.jenkins-…)
- [CVE-2025-53651](https://cve.now/CVE-2025-53651.md): Jenkins HTML Publisher Plugin 425 and earlier displays log messages that include the absolute paths of files archived during the Publish HTM (CVSS 6.3, Jenkins Project Jenkins HTML Publisher Plugin · org.jenkins…)
- [CVE-2025-53650](https://cve.now/CVE-2025-53650.md): Jenkins Credentials Binding Plugin 687.v619cb\_15e923f and earlier does not properly mask (i.e., replace with asterisks) credentials present (CVSS 7.3, Jenkins Project Jenkins Credentials Binding Plugin · org.je…)
- [CVE-2025-7381](https://cve.now/CVE-2025-7381.md): Exposure of sensitive PHP information to an unauthorized control sphere in mautic/mautic images (CVSS 5.3, Docker Mautic)
- [CVE-2025-7204](https://cve.now/CVE-2025-7204.md): Exposure of password hashes via API responses in ConnectWise PSA (CVSS 6.5, ConnectWise PSA)
- [CVE-2025-1112](https://cve.now/CVE-2025-1112.md): IBM OpenPages with Watson information disclosure (CVSS 4.3, IBM OpenPages with Watson)
- [CVE-2025-2670](https://cve.now/CVE-2025-2670.md): IBM OpenPages information disclosure (CVSS 4.3, IBM OpenPages)
- [CVE-2025-53546](https://cve.now/CVE-2025-53546.md): Folo allows secrets exfiltration via \`pull\_request\_target\` (CVSS 9.1, RSSNext Folo)
- [CVE-2025-6514](https://cve.now/CVE-2025-6514.md): OS command injection in mcp-remote when connecting to untrusted MCP servers (CVSS 9.6, mcp-remote)
- [CVE-2025-38264](https://cve.now/CVE-2025-38264.md): nvme-tcp: sanitize request list handling (CVSS 9.8, Linux)
- [CVE-2025-38263](https://cve.now/CVE-2025-38263.md): bcache: fix NULL pointer in cache\_set\_flush() (no CVSS, Linux)
- [CVE-2025-38262](https://cve.now/CVE-2025-38262.md): tty: serial: uartlite: register uart driver in init (CVSS 7.8, Linux)
- [CVE-2025-38261](https://cve.now/CVE-2025-38261.md): riscv: save the SR\_SUM status over switches (CVSS 7.8, Linux)
- [CVE-2025-38260](https://cve.now/CVE-2025-38260.md): btrfs: handle csum tree error with rescue=ibadroots correctly (no CVSS, Linux)
- [CVE-2025-38259](https://cve.now/CVE-2025-38259.md): ASoC: codecs: wcd9335: Fix missing free of regulator supplies (no CVSS, Linux)
- [CVE-2025-38258](https://cve.now/CVE-2025-38258.md): mm/damon/sysfs-schemes: free old damon\_sysfs\_scheme\_filter-\>memcg\_path on write (no CVSS, Linux)
- [CVE-2025-38257](https://cve.now/CVE-2025-38257.md): s390/pkey: Prevent overflow in size calculation for memdup\_user() (CVSS 7.3, Linux)
- [CVE-2025-38256](https://cve.now/CVE-2025-38256.md): io\_uring/rsrc: fix folio unpinning (no CVSS, Linux)
- [CVE-2025-38255](https://cve.now/CVE-2025-38255.md): lib/group\_cpus: fix NULL pointer dereference from group\_cpus\_evenly() (no CVSS, Linux)
- [CVE-2025-38254](https://cve.now/CVE-2025-38254.md): drm/amd/display: Add sanity checks for drm\_edid\_raw() (no CVSS, Linux)
- [CVE-2025-38253](https://cve.now/CVE-2025-38253.md): HID: wacom: fix crash in wacom\_aes\_battery\_handler() (CVSS 8.8, Linux)
- [CVE-2025-38252](https://cve.now/CVE-2025-38252.md): cxl/ras: Fix CPER handler device confusion (CVSS 7.8, Linux)
- [CVE-2025-38251](https://cve.now/CVE-2025-38251.md): atm: clip: prevent NULL deref in clip\_push() (no CVSS, Linux)
- [CVE-2025-38250](https://cve.now/CVE-2025-38250.md): Bluetooth: hci\_core: Fix use-after-free in vhci\_flush() (CVSS 7.8, Linux)
- [CVE-2025-38249](https://cve.now/CVE-2025-38249.md): ALSA: usb-audio: Fix out-of-bounds read in snd\_usb\_get\_audioformat\_uac3() (no CVSS, Linux)
- [CVE-2025-38248](https://cve.now/CVE-2025-38248.md): bridge: mcast: Fix use-after-free during router port configuration (CVSS 7.8, Linux)
- [CVE-2025-38247](https://cve.now/CVE-2025-38247.md): userns and mnt\_idmap leak in open\_tree\_attr(2) (no CVSS, Linux)
- [CVE-2025-38246](https://cve.now/CVE-2025-38246.md): bnxt: properly flush XDP redirect lists (CVSS 9.8, Linux)
- [CVE-2025-38245](https://cve.now/CVE-2025-38245.md): atm: Release atm\_dev\_mutex after removing procfs in atm\_dev\_deregister(). (no CVSS, Linux)
- [CVE-2025-38244](https://cve.now/CVE-2025-38244.md): smb: client: fix potential deadlock when reconnecting channels (CVSS 7.5, Linux)
- [CVE-2025-38243](https://cve.now/CVE-2025-38243.md): btrfs: fix invalid inode pointer dereferences during log replay (no CVSS, Linux)
- [CVE-2025-38242](https://cve.now/CVE-2025-38242.md): mm: userfaultfd: fix race of userfaultfd\_move and swap cache (CVSS 7.8, Linux)
- [CVE-2025-38241](https://cve.now/CVE-2025-38241.md): mm/shmem, swap: fix softlockup with mTHP swapin (no CVSS, Linux)
- [CVE-2025-38239](https://cve.now/CVE-2025-38239.md): scsi: megaraid\_sas: Fix invalid node index (CVSS 7.3, Linux)
- [CVE-2025-38238](https://cve.now/CVE-2025-38238.md): scsi: fnic: Fix crash in fnic\_wq\_cmpl\_handler when FDMI times out (CVSS 8.8, Linux)
- [CVE-2025-3499](https://cve.now/CVE-2025-3499.md): Unauthenticated execution of arbitrary commands in Radiflow iSAP Smart Collector (CVSS 10.0, Radiflow iSAP Smart Collector)
- [CVE-2025-3498](https://cve.now/CVE-2025-3498.md): Unauthenticated modification of Radiflow iSAP Smart Collector configuration (CVSS 9.9, Radiflow iSAP Smart Collector)
- [CVE-2025-3497](https://cve.now/CVE-2025-3497.md): Radiflow iSAP Smart Collector Linux distribution unmaintained (CVSS 8.7, Radiflow iSAP Smart Collector)
- [CVE-2025-27028](https://cve.now/CVE-2025-27028.md): Read access of deprivileged Radiflow iSAP Smart Collector user (CVSS 6.8, Radiflow iSAP Smart Collector)
- [CVE-2025-27027](https://cve.now/CVE-2025-27027.md): Restricted shell evasion in Radiflow iSAP Smart Collector (CVSS 4.1, Radiflow iSAP Smart Collector)
- [CVE-2025-7379](https://cve.now/CVE-2025-7379.md): A security bypass vulnerability was found in DataSync Center installed on ADM (CVSS 5.2, ASUSTOR ADM)
- [CVE-2025-7378](https://cve.now/CVE-2025-7378.md): An improper input validation vulnerability was found on manipulating configuration of ADM (CVSS 6.0, ASUSTOR ADM)
- [CVE-2025-7220](https://cve.now/CVE-2025-7220.md): Campcodes Payroll Management System ajax.php sql injection (CVSS 6.9, Campcodes Payroll Management System)
- [CVE-2025-7219](https://cve.now/CVE-2025-7219.md): Campcodes Payroll Management System ajax.php sql injection (CVSS 6.9, Campcodes Payroll Management System)
- [CVE-2025-7218](https://cve.now/CVE-2025-7218.md): Campcodes Payroll Management System ajax.php sql injection (CVSS 6.9, Campcodes Payroll Management System)
- [CVE-2025-6691](https://cve.now/CVE-2025-6691.md): SureForms – Drag and Drop Form Builder for WordPress \<= 1.7.3 - Unauthenticated Arbitrary File Deletion Triggered via Administrator Submission Deletion (CVSS 8.1, brainstormforce SureForms – Drag and Drop Form Builder for…)
- [CVE-2025-6742](https://cve.now/CVE-2025-6742.md): SureForms – Drag and Drop Form Builder for WordPress \<= 1.7.3 - Unauthenticated PHP Object Injection (PHAR) Triggered via Admin Submission Deletion (CVSS 7.5, brainstormforce SureForms – Drag and Drop Form Builder for…)
- [CVE-2025-7217](https://cve.now/CVE-2025-7217.md): Campcodes Payroll Management System ajax.php sql injection (CVSS 6.9, Campcodes Payroll Management System)
- [CVE-2025-7216](https://cve.now/CVE-2025-7216.md): lty628 Aidigu PHP Object common.php checkUserCookie deserialization (CVSS 6.9, lty628 Aidigu)
- [CVE-2025-7215](https://cve.now/CVE-2025-7215.md): FNKvision FNK-GU2 wpa\_supplicant.conf cleartext storage (CVSS 1.0, FNKvision FNK-GU2)
- [CVE-2025-7214](https://cve.now/CVE-2025-7214.md): FNKvision FNK-GU2 MD5 shadow risky encryption (CVSS 1.0, FNKvision FNK-GU2)
- [CVE-2025-4606](https://cve.now/CVE-2025-4606.md): Sala - Startup & SaaS WordPress Theme \<= 1.1.4 - Unauthenticated Privilege Escalation via Password Reset/Account Takeover (CVSS 9.8, uxper Sala - Startup & SaaS WordPress Theme)
- [CVE-2025-7059](https://cve.now/CVE-2025-7059.md): Simple Featured Image \<= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via slideshow Parameter (CVSS 6.4, jdegayojr Simple Featured Image)
- [CVE-2025-7213](https://cve.now/CVE-2025-7213.md): FNKvision FNK-GU2 UART Interface on-chip debug and test interface with improper access control (CVSS 5.4, FNKvision FNK-GU2)
- [CVE-2025-7212](https://cve.now/CVE-2025-7212.md): itsourcecode Insurance Management System insertAgent.php sql injection (CVSS 5.3, itsourcecode Insurance Management System)
- [CVE-2025-7211](https://cve.now/CVE-2025-7211.md): code-projects LifeStyle Store cart\_add.php sql injection (CVSS 6.9, code-projects LifeStyle Store)
- [CVE-2025-5678](https://cve.now/CVE-2025-5678.md): Kadence Blocks – Gutenberg Blocks for Page Builder Features \<= 3.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via \`redirectURL\` Parameter (CVSS 6.4, stellarwp Kadence Blocks — Page Builder Toolkit for Gutenbe…)
- [CVE-2025-7210](https://cve.now/CVE-2025-7210.md): code-projects/Fabian Ros Library Management System profile\_update.php unrestricted upload (CVSS 5.3, code-projects Library Management System · Fabian Ros Librar…)
- [CVE-2025-7209](https://cve.now/CVE-2025-7209.md): 9fans plan9port x509.c value\_decode null pointer dereference (CVSS 4.8, 9fans plan9port)
- [CVE-2025-34077](https://cve.now/CVE-2025-34077.md): WordPress Pie Register Plugin ≤ 3.7.1.4 Authentication Bypass RCE (CVSS 10.0, Genetech Solutions WordPress Pie Register Plugin)
- [CVE-2025-7208](https://cve.now/CVE-2025-7208.md): 9fans plan9port x509.c edump heap-based overflow (CVSS 5.1, 9fans plan9port)
- [CVE-2025-7207](https://cve.now/CVE-2025-7207.md): mruby nregs codegen.c scope\_new heap-based overflow (CVSS 4.8, mruby)
- [CVE-2021-27961](https://cve.now/CVE-2021-27961.md): evesys 7.1 (2152) through 8.0 (2202) allows Reflected XSS via the indexeva.php action parameter. (CVSS 6.5)
- [CVE-2025-44177](https://cve.now/CVE-2025-44177.md): A directory traversal vulnerability was discovered in White Star Software Protop version 4.4.2-2024-11-27, specifically in the /pt3upd/ endp (CVSS 8.2)
- [CVE-2025-44525](https://cve.now/CVE-2025-44525.md): Texas Instruments CC2652RB LaunchPad SimpleLink CC13XX CC26XX SDK 7.41.00.17 was discovered to utilize insufficient permission checks on cri (CVSS 6.5)
- [CVE-2025-44526](https://cve.now/CVE-2025-44526.md): Realtek RTL8762EKF-EVB RTL8762E SDK V1.4.0 was discovered to utilize insufficient permission checks on critical fields within Bluetooth Low (CVSS 6.5)
- [CVE-2025-49604](https://cve.now/CVE-2025-49604.md): For Realtek AmebaD devices, a heap-based buffer overflow was discovered in Ameba-AIoT ameba-arduino-d before version 3.1.9 and ameba-rtos-d (CVSS 5.4)
- [CVE-2025-52357](https://cve.now/CVE-2025-52357.md): Cross-Site Scripting (XSS) vulnerability exists in the ping diagnostic feature of FiberHome FD602GW-DX-R410 router (firmware V2.2.14), allow (CVSS 4.1)
- [CVE-2025-52364](https://cve.now/CVE-2025-52364.md): Insecure Permissions vulnerability in Tenda CP3 Pro Firmware V22.5.4.93 allows the telnet service (telnetd) by default at boot via the initi (CVSS 7.5)
- [CVE-2025-53645](https://cve.now/CVE-2025-53645.md): Zimbra Collaboration (ZCS) before 9.0.0 Patch 46, 10.0.x before 10.0.15, and 10.1.x before 10.1.9 is vulnerable to a denial of service condi (CVSS 7.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-07-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.