# CVEs published 2025-07-18

109 CVEs were published on July 18, 2025: 13 critical, 29 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2025-27210](https://cve.now/CVE-2025-27210.md): An incomplete fix has been identified for CVE-2025-23084 in Node.js, specifically affecting Windows device names like CON, PRN, and AUX. (CVSS 7.5, nodejs node · nodejs)
- [CVE-2025-27209](https://cve.now/CVE-2025-27209.md): The V8 release used in Node.js v24.0.0 has changed how string hashes are computed using rapidhash. (CVSS 7.5, nodejs node)
- [CVE-2025-7396](https://cve.now/CVE-2025-7396.md): Curve25519 Blinding (CVSS 5.6, wolfSSL)
- [CVE-2025-7394](https://cve.now/CVE-2025-7394.md): In the OpenSSL compatibility layer implementation, the function RAND\_poll() was not behaving as expected and leading to the potential for pr (CVSS 7.0, wolfSSL)
- [CVE-2025-7395](https://cve.now/CVE-2025-7395.md): Domain Name Validation Bypass with Apple Native Certificate Validation (CVSS 9.2, wolfSSL)
- [CVE-2025-7814](https://cve.now/CVE-2025-7814.md): code-projects Food Ordering Review System signup\_function.php sql injection (CVSS 6.9, code-projects Food Ordering Review System)
- [CVE-2025-7807](https://cve.now/CVE-2025-7807.md): Tenda FH451 SafeUrlFilter fromSafeUrlFilter stack-based overflow (CVSS 8.7, Tenda FH451)
- [CVE-2025-7806](https://cve.now/CVE-2025-7806.md): Tenda FH451 SafeClientFilter fromSafeClientFilter stack-based overflow (CVSS 8.7, Tenda FH451)
- [CVE-2025-7805](https://cve.now/CVE-2025-7805.md): Tenda FH451 PPTPUserSetting fromPptpUserSetting stack-based overflow (CVSS 8.7, Tenda FH451)
- [CVE-2025-7803](https://cve.now/CVE-2025-7803.md): descreekert wx-discuz wx.php validToken cross site scripting (CVSS 5.1, descreekert wx-discuz)
- [CVE-2025-7802](https://cve.now/CVE-2025-7802.md): PHPGurukul Complaint Management System complaint-search.php cross site scripting (CVSS 5.1, PHPGurukul Complaint Management System)
- [CVE-2025-33014](https://cve.now/CVE-2025-33014.md): IBM Sterling B2B Integrator and IBM Sterling File Gateway link injection (CVSS 5.4, IBM Sterling B2B Integrator · IBM Sterling File Gateway)
- [CVE-2025-7801](https://cve.now/CVE-2025-7801.md): BossSoft CRM HNDCBas\_customPrmSearchDtl.jsp sql injection (CVSS 6.9, BossSoft CRM)
- [CVE-2025-7800](https://cve.now/CVE-2025-7800.md): cgpandey hotelmis HTTP GET Request admin.php cross site scripting (CVSS 5.1, cgpandey hotelmis)
- [CVE-2025-7798](https://cve.now/CVE-2025-7798.md): Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System companyManage sql injection (CVSS 5.3, Beijing Shenzhou Shihan Technology Multimedia Integrated Bu…)
- [CVE-2025-7797](https://cve.now/CVE-2025-7797.md): GPAC dash\_client.c gf\_dash\_download\_init\_segment null pointer dereference (CVSS 6.9, GPAC)
- [CVE-2025-7796](https://cve.now/CVE-2025-7796.md): Tenda FH451 PPTPDClient fromPptpUserAdd stack-based overflow (CVSS 8.7, Tenda FH451)
- [CVE-2025-7795](https://cve.now/CVE-2025-7795.md): Tenda FH451 P2pListFilter fromP2pListFilter stack-based overflow (CVSS 8.7, Tenda FH451)
- [CVE-2025-53901](https://cve.now/CVE-2025-53901.md): Wasmtime has host panic with \`fd\_renumber\` WASIp1 function (CVSS 3.5, bytecodealliance wasmtime · wasmtime +1)
- [CVE-2025-53762](https://cve.now/CVE-2025-53762.md): Microsoft Purview Elevation of Privilege Vulnerability (CVSS 8.7, Microsoft Purview)
- [CVE-2025-47158](https://cve.now/CVE-2025-47158.md): Azure DevOps Server Elevation of Privilege Vulnerability (CVSS 9.0, Microsoft Azure DevOps)
- [CVE-2025-47995](https://cve.now/CVE-2025-47995.md): Azure Machine Learning Elevation of Privilege Vulnerability (CVSS 6.5, Microsoft Azure Machine Learning)
- [CVE-2025-49746](https://cve.now/CVE-2025-49746.md): Azure Machine Learning Elevation of Privilege Vulnerability (CVSS 9.9, Microsoft Azure Machine Learning)
- [CVE-2025-49747](https://cve.now/CVE-2025-49747.md): Azure Machine Learning Elevation of Privilege Vulnerability (CVSS 9.9, Microsoft Azure Machine Learning)
- [CVE-2025-7794](https://cve.now/CVE-2025-7794.md): Tenda FH451 NatStaticSetting fromNatStaticSetting stack-based overflow (CVSS 8.7, Tenda FH451)
- [CVE-2025-7783](https://cve.now/CVE-2025-7783.md): Usage of unsafe random function in form-data for choosing boundary (CVSS 9.4, form-data)
- [CVE-2025-7793](https://cve.now/CVE-2025-7793.md): Tenda FH451 webtypelibrary formWebTypeLibrary stack-based overflow (CVSS 8.7, Tenda FH451)
- [CVE-2025-7792](https://cve.now/CVE-2025-7792.md): Tenda FH451 SafeEmailFilter formSafeEmailFilter stack-based overflow (CVSS 8.7, Tenda FH451)
- [CVE-2025-54079](https://cve.now/CVE-2025-54079.md): WeGIA vulnerable to SQL Injection (Blind Time-Based) in endpoint 'Profile\_Atendido.php' parameter 'idatendido' (CVSS 9.4, LabRedesCefetRJ WeGIA)
- [CVE-2025-54078](https://cve.now/CVE-2025-54078.md): WeGIA Reflected Cross-Site Scripting (XSS) vulnerability in endpoint 'personalizacao\_imagem.php' parameter 'err' (CVSS 6.5, LabRedesCefetRJ WeGIA)
- [CVE-2025-54077](https://cve.now/CVE-2025-54077.md): WeGIA Reflected Cross-Site Scripting (XSS) vulnerability in endpoint 'personalizacao.php' parameter 'err' (CVSS 6.5, LabRedesCefetRJ WeGIA)
- [CVE-2025-54076](https://cve.now/CVE-2025-54076.md): WeGIA Reflected Cross-Site Scripting (XSS) vulnerability in endpoint 'pre\_cadastro\_atendido.php' parameter 'msg\_e' (CVSS 6.5, LabRedesCefetRJ WeGIA)
- [CVE-2025-54075](https://cve.now/CVE-2025-54075.md): mdc vulnerable to XSS in markdown rendering bypassing HTML filter. (N°4) (CVSS 8.3, nuxt-modules mdc · @nuxtjs/mdc)
- [CVE-2025-54073](https://cve.now/CVE-2025-54073.md): mcp-package-docs vulnerable to command injection in several tools (CVSS 7.5, sammcj mcp-package-docs · mcp-package-docs)
- [CVE-2025-7791](https://cve.now/CVE-2025-7791.md): PHPGurukul Online Security Guards Hiring System search.php cross site scripting (CVSS 5.1, PHPGurukul Online Security Guards Hiring System)
- [CVE-2025-54059](https://cve.now/CVE-2025-54059.md): melange creates SBOM files in APKs with world-writable permissions (CVSS 4.4, chainguard-dev melange · chainguard.dev/melange)
- [CVE-2025-53945](https://cve.now/CVE-2025-53945.md): apko has incorrect permission (0666) in /etc/ld.so.cache and other files (CVSS 7.0, chainguard-dev apko · chainguard.dev/apko)
- [CVE-2025-53888](https://cve.now/CVE-2025-53888.md): RIOT-OS has an ineffective size check that can lead to buffer overflow in link layer address filter /sys/net/link\_layer/l2filter/l2filter.c (CVSS 6.6, RIOT-OS RIOT)
- [CVE-2025-7790](https://cve.now/CVE-2025-7790.md): D-Link DI-8100 HTTP Request menu\_nat.asp stack-based overflow (CVSS 8.7, D-Link DI-8100)
- [CVE-2025-7789](https://cve.now/CVE-2025-7789.md): Xuxueli xxl-job Token Generation IndexController.java makeToken weak password hash (CVSS 6.3, Xuxueli xxl-job · com.xuxueli:xxl-job-admin)
- [CVE-2025-46732](https://cve.now/CVE-2025-46732.md): OpenCTI's GraphQL IDOR enables authenticated users to modify or delete notifications of other users (CVSS 5.4, OpenCTI-Platform opencti · pycti)
- [CVE-2025-7788](https://cve.now/CVE-2025-7788.md): Xuxueli xxl-job SampleXxlJob.java commandJobHandler os command injection (CVSS 5.3, Xuxueli xxl-job)
- [CVE-2025-7787](https://cve.now/CVE-2025-7787.md): Xuxueli xxl-job SampleXxlJob.java httpJobHandler server-side request forgery (CVSS 5.3, Xuxueli xxl-job · com.xuxueli:xxl-job-core)
- [CVE-2024-13175](https://cve.now/CVE-2024-13175.md): IDOR in Vidco Software's VOC TESTER (CVSS 5.5, Vidco Software VOC TESTER)
- [CVE-2025-7784](https://cve.now/CVE-2025-7784.md): Org.keycloak/keycloak-services: privilege escalation in keycloak admin console (fgapv2 enabled) (CVSS 6.5, keycloak · Red Hat build of Keycloak +3)
- [CVE-2025-7786](https://cve.now/CVE-2025-7786.md): Gnuboard g6 Post Reply qa cross site scripting (CVSS 5.1, Gnuboard g6)
- [CVE-2025-7785](https://cve.now/CVE-2025-7785.md): thinkgem JeeSite SsoController.java sso redirect (CVSS 5.3, thinkgem JeeSite)
- [CVE-2025-6227](https://cve.now/CVE-2025-6227.md): Invite token is used as part of the secure communication (CVSS 2.2, Mattermost · github.com/mattermost/mattermost-server +3)
- [CVE-2025-49484](https://cve.now/CVE-2025-49484.md): Extension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.1 for Joomla (CVSS 8.7, joomsky.com JS Jobs component for Joomla)
- [CVE-2025-50126](https://cve.now/CVE-2025-50126.md): Extension - rsjoomla.com - Stored XSS vulnerability RSBlog! component 1.11.6-1.14.5 for Joomla (CVSS 5.3, rsjoomla.com RSBlog! component for Joomla)
- [CVE-2025-50058](https://cve.now/CVE-2025-50058.md): Extension - rsjoomla.com - Stored XSS vulnerability in RSDirectory! component 1.16.3-1.17.7 for Joomla (CVSS 5.1, rsjoomla.com RSDirectory! component for Joomla)
- [CVE-2025-50057](https://cve.now/CVE-2025-50057.md): Extension - rsjoomla.com - DOS vulnerability RSFiles! component 1.16.3-1.17.7 for Joomla (CVSS 6.9, rsjoomla.com RSFiles! component for Joomla)
- [CVE-2025-50056](https://cve.now/CVE-2025-50056.md): Extension - rsjoomla.com - Reflected XSS vulnerability RSMail! component 1.19.20-1.22.28 for Joomla (CVSS 5.1, rsjoomla.com RSMail! component for Joomla)
- [CVE-2025-49485](https://cve.now/CVE-2025-49485.md): Extension - balbooa.com - SQL injection in Balbooa Forms component version 1.0.0 - 2.3.1.1 for Joomla (CVSS 8.6, balbooa.com Balbooa Forms component for Joomla)
- [CVE-2025-49486](https://cve.now/CVE-2025-49486.md): Extension - balbooa.com - Stored XSS in Balbooa Gallery component version 1.0.0 - 2.4.0 for Joomla (CVSS 8.6, balbooa.com Balbooa Gallery component for Joomla)
- [CVE-2025-2425](https://cve.now/CVE-2025-2425.md): TOCTOU race condition vulnerability in ESET products on Windows (CVSS 5.1, ESET, spol. s.r.o ESET NOD32 Antivirus · ESET, spol. s.r… +9)
- [CVE-2025-6233](https://cve.now/CVE-2025-6233.md): Arbitrary file read by system admin via path traversal (CVSS 6.8, Mattermost · github.com/mattermost/mattermost-server +3)
- [CVE-2025-6226](https://cve.now/CVE-2025-6226.md): IDOR in CreatePost API allows for timeboxed message disclosure (CVSS 6.5, Mattermost · github.com/mattermost/mattermost-server +3)
- [CVE-2025-7444](https://cve.now/CVE-2025-7444.md): LoginPress Pro \<= 5.0.1 - Authentication Bypass via WordPress.com OAuth provider (CVSS 9.8, LoginPress Pro)
- [CVE-2024-32124](https://cve.now/CVE-2024-32124.md): An improper access control vulnerability \[CWE-284\] in FortiIsolator version 2.4.4, version 2.4.3, 2.3 all versions logging component may all (CVSS 4.0, Fortinet FortiIsolator)
- [CVE-2024-27779](https://cve.now/CVE-2024-27779.md): An insufficient session expiration vulnerability \[CWE-613\] in FortiSandbox FortiSandbox version 4.4.4 and below, version 4.2.6 and below, 4. (CVSS 6.3, Fortinet FortiSandbox · Fortinet FortiIsolator)
- [CVE-2025-38349](https://cve.now/CVE-2025-38349.md): eventpoll: don't decrement ep refcount while still holding the ep mutex (CVSS 7.8, Linux · :linux\_kernel:)
- [CVE-2025-6197](https://cve.now/CVE-2025-6197.md): An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. (CVSS 4.2, Grafana)
- [CVE-2025-6023](https://cve.now/CVE-2025-6023.md): An open redirect vulnerability has been identified in Grafana OSS that can be exploited to achieve XSS attacks. (CVSS 7.6, Grafana · github.com/grafana/grafana)
- [CVE-2025-26855](https://cve.now/CVE-2025-26855.md): Extension - joomcar.net - SQL injection in Articles Calendar 1.0.0 - 1.0.1.0007 for Joomla (CVSS 9.8, joomcar.net Articles Calendar extension for Joomla)
- [CVE-2025-26854](https://cve.now/CVE-2025-26854.md): Extension - joomcar.net - SQL injection in Articles Good Search 1.0.0 - 1.2.4.0011 for Joomla (CVSS 9.8, joomcar.net Articles Good Search extension for Joomla)
- [CVE-2025-7438](https://cve.now/CVE-2025-7438.md): MasterStudy LMS – Online Courses, eLearning PRO Plus \<= 4.7.9 - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 7.5, StylemixThemes MasterStudy LMS Pro)
- [CVE-2025-7772](https://cve.now/CVE-2025-7772.md): Malcure Malware Scanner — #1 Toolset for WordPress Malware Removal \<= 16.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read (CVSS 6.5, Malcure Malware Shield — Removal, Repair, Monitor)
- [CVE-2025-5811](https://cve.now/CVE-2025-5811.md): Listly: Listicles For WordPress \<= 2.7 - Unauthenticated Arbitrary Transient Deletion (CVSS 5.3, milanmk Listly: Listicles For WordPress)
- [CVE-2025-5800](https://cve.now/CVE-2025-5800.md): Testimonial Post type \<= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via auto\_play Parameter (CVSS 6.4, juiiee8487 Testimonial Post type)
- [CVE-2025-5752](https://cve.now/CVE-2025-5752.md): Vertical scroll image slideshow gallery \<= 11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter (CVSS 6.4, gopiplus Vertical scroll image slideshow gallery)
- [CVE-2025-6717](https://cve.now/CVE-2025-6717.md): B1.lt for WooCommerce \<= 2.2.56 - Authenticated (Subscriber+) SQL Injection (CVSS 6.5, b1accounting Site.pro for WooCommerce)
- [CVE-2025-5767](https://cve.now/CVE-2025-5767.md): Crowdfunding for WooCommerce \<= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter (CVSS 6.4, wpwham Crowdfunding for WooCommerce)
- [CVE-2025-6719](https://cve.now/CVE-2025-6719.md): Terms descriptions \<= 3.4.8 - Authenticated (Admin+) Stored Cross-Site Scripting (CVSS 4.4, vladimirs Terms descriptions)
- [CVE-2025-6726](https://cve.now/CVE-2025-6726.md): Block Editor Gallery Slider \<= 1.1.1 - Missing Authorization to Authenticated (Subscriber+) Limited Post Meta Update (CVSS 4.3, krasenslavov Block Editor Gallery Slider for WordPress – Im…)
- [CVE-2025-7643](https://cve.now/CVE-2025-7643.md): Attachment Manager \<= 2.1.2 - Unauthenticated Arbitrary File Deletion (CVSS 9.1, aaroncampbell Attachment Manager)
- [CVE-2025-5754](https://cve.now/CVE-2025-5754.md): Useful Tab Block – Responsive & AMP-Compatible \<= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via className Parameter (CVSS 6.4, bbc000tommy Useful Tab Block – Responsive & AMP-Compatible)
- [CVE-2025-6718](https://cve.now/CVE-2025-6718.md): B1.lt for WooCommerce \<= 2.2.57 - Missing Authorization to Authenticated (Subscriber+) Arbitrary SQL Injection (CVSS 8.8, b1accounting Site.pro for WooCommerce)
- [CVE-2025-6222](https://cve.now/CVE-2025-6222.md): WooCommerce Refund And Exchange with RMA - Warranty Management, Refund Policy, Manage User Wallet \<= 3.2.6 - Unauthenticated Arbitrary File Upload (CVSS 9.8, WP Swings WooCommerce Refund And Exchange with RMA - Warran…)
- [CVE-2025-6781](https://cve.now/CVE-2025-6781.md): Copymatic – AI Content Writer & Generator \<= 2.1 - Cross-Site Request Forgery to Settings Update (CVSS 4.3, ryanfaber Copymatic – AI Content Writer & Generator)
- [CVE-2025-6053](https://cve.now/CVE-2025-6053.md): Zuppler Online Ordering \<= 2.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 6.1, bogdansilivestru Zuppler Online Ordering)
- [CVE-2025-7660](https://cve.now/CVE-2025-7660.md): Map My Locations \<= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, lewisking0072 Map My Locations)
- [CVE-2025-7638](https://cve.now/CVE-2025-7638.md): Forminator Forms – Contact Form, Payment Form & Custom Form Builder \<= 1.45.0 - Authenticated (Administrator+) SQL Injection via \`order\_by\` Parameter (CVSS 4.9, wpmudev Forminator Forms – Contact Form, Payment Form & Cus…)
- [CVE-2025-5816](https://cve.now/CVE-2025-5816.md): Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship \<= 3.2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) View Order Tracking Details (CVSS 4.3, Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo…)
- [CVE-2025-6813](https://cve.now/CVE-2025-6813.md): aapanel WP Toolkit 1.0 - 1.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via auto\_login() Function (CVSS 8.8, aapanel WP Toolkit)
- [CVE-2025-3740](https://cve.now/CVE-2025-3740.md): School Management System for Wordpress \<= 93.1.0 - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update (CVSS 8.8, dasinfomedia School Management System for Wordpress)
- [CVE-2025-7648](https://cve.now/CVE-2025-7648.md): Ruven Themes: Shortcodes \<= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, ruven-themes Ruven Themes: Shortcodes)
- [CVE-2025-7431](https://cve.now/CVE-2025-7431.md): Knowledge Base \<= 2.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Slug (CVSS 4.4, ajay Knowledge Base)
- [CVE-2025-7767](https://cve.now/CVE-2025-7767.md): PHPGurukul Art Gallery Management System edit-art-medium-detail.php cross site scripting (CVSS 5.1, PHPGurukul Art Gallery Management System)
- [CVE-2025-45156](https://cve.now/CVE-2025-45156.md): Splashin iOS v2.0 fails to enforce server-side interval restrictions for location updates for free-tier users. (CVSS 5.3)
- [CVE-2025-45157](https://cve.now/CVE-2025-45157.md): Insecure permissions in Splashin iOS v2.0 allow unauthorized attackers to access location data for specific users. (CVSS 6.5)
- [CVE-2025-46000](https://cve.now/CVE-2025-46000.md): An arbitrary file upload vulnerability in the component /rsc/filemanager.rsc.class.php of Filemanager commit c75b914 v.2.5.0 allows attacker (CVSS 6.5)
- [CVE-2025-46001](https://cve.now/CVE-2025-46001.md): An arbitrary file upload vulnerability in the is\_allowed\_file\_type() function of Filemanager v2.3.0 allows attackers to execute arbitrary co (CVSS 9.8, simogeo/filemanager)
- [CVE-2025-46002](https://cve.now/CVE-2025-46002.md): An issue in Filemanager v2.5.0 and below allows attackers to execute a directory traversal via sending a crafted HTTP request to the fileman (CVSS 6.5, simogeo/filemanager)
- [CVE-2025-50581](https://cve.now/CVE-2025-50581.md): MRCMS v3.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/group/save.do. (CVSS 4.8)
- [CVE-2025-50582](https://cve.now/CVE-2025-50582.md): StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Course module. (CVSS 4.8)
- [CVE-2025-50583](https://cve.now/CVE-2025-50583.md): StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Student module. (CVSS 4.8)
- [CVE-2025-50584](https://cve.now/CVE-2025-50584.md): StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Teacher module. (CVSS 4.8)
- [CVE-2025-50585](https://cve.now/CVE-2025-50585.md): StudentManage v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/adminStudentUrl. (CVSS 8.8)
- [CVE-2025-50586](https://cve.now/CVE-2025-50586.md): StudentManage v1.0 was discovered to contain Cross-Site Request Forgery (CSRF). (CVSS 6.5)
- [CVE-2025-50708](https://cve.now/CVE-2025-50708.md): An issue in Perplexity AI GPT-4 v.2.51.0 allows a remote attacker to obtain sensitive information via the token component in the shared chat (CVSS 7.5)
- [CVE-2025-52162](https://cve.now/CVE-2025-52162.md): agorum Software GmbH Agorum core open v11.9.2 & v11.10.1 was discovered to contain an XML External Entity (XXE) via the RSSReader endpoint. (CVSS 6.5)
- [CVE-2025-52163](https://cve.now/CVE-2025-52163.md): A Server-Side Request Forgery (SSRF) in the component TunnelServlet of agorum Software GmbH Agorum core open v11.9.2 & v11.10.1 allows attac (CVSS 6.5)
- [CVE-2025-52164](https://cve.now/CVE-2025-52164.md): Software GmbH Agorum core open v11.9.2 & v11.10.1 was discovered to store credentials in plaintext. (CVSS 8.2)
- [CVE-2025-52166](https://cve.now/CVE-2025-52166.md): Incorrect access control in Software GmbH Agorum core open v11.9.2 & v11.10.1 allows authenticated attackers to escalate privileges to Admin (CVSS 6.5)
- [CVE-2025-52168](https://cve.now/CVE-2025-52168.md): Incorrect access control in the dynawebservice component of agorum Software GmbH Agorum core open v11.9.2 & v11.10.1 allows unauthenticated (CVSS 6.5)
- [CVE-2025-52169](https://cve.now/CVE-2025-52169.md): agorum Software GmbH Agorum core open v11.9.2 & v11.10.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability. (CVSS 7.1)
- [CVE-2025-54309](https://cve.now/CVE-2025-54309.md): CrushFTP 10 before 10.8.5 and 11 before 11.3.4\_23, when the DMZ proxy feature is not used, mishandles AS2 validation and consequently allows (CVSS 9.0, KEV, CrushFTP)
- [CVE-2025-54310](https://cve.now/CVE-2025-54310.md): qBittorrent before 5.1.2 does not prevent access to a local file that is referenced in a link URL. (CVSS 4.0, qBittorrent)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-07-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.