CVEs published August 17, 2025
7 CVEs were published on August 17, 2025: 0 critical, 1 high.
- Published
- 7
- Critical
- 0
- High
- 1
- Medium
- 5
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- ExpressGateway express-gateway · express-gateway
- 2
- Tenda AC20
- 2
- BuzzFeed App
- 1
- Kubernetes Image Builder
- 1
- ThingsBoard
- 1
High 1
Medium, low and unrated 6
- CVE-2025-9096ExpressGateway express-gateway REST Endpoint apps.js cross site scriptingExpressGateway express-gateway · express-gateway
- CVE-2025-9095ExpressGateway express-gateway REST Endpoint users.js cross site scriptingExpressGateway express-gateway · express-gateway
- CVE-2025-9094ThingsBoard Add Gateway special elements used in a template engineThingsBoard
- CVE-2025-9093BuzzFeed App com.buzzfeed.android AndroidManifest.xml improper export of android application componentsBuzzFeed App
- CVE-2025-9091Tenda AC20 shadow hard-coded credentialsTenda AC20
- CVE-2025-9090Tenda AC20 Telnet Service telnet websFormDefine command injectionTenda AC20