CVEs published August 26, 2025
126 CVEs were published on August 26, 2025: 11 critical, 47 high. 1 is now in CISA KEV.
- Published
- 126
- Critical
- 11
- High
- 47
- Medium
- 64
- Low
- 3
- Unrated
- 1
- Now in CISA KEV
- 1
- Fix available
- 26
Most affected products
- Google Android
- 26
- 1000projects Online Project Report Submission and Evaluatio…
- 5
- itsourcecode Apartment Management System
- 5
- Agiloft
- 4
- mtons mblog
- 4
- NVIDIA NeMo Framework
- 4
- IBM Cognos Command Center
- 3
- Linksys RE6250 · Linksys RE6300 +4
- 3
- NetScaler ADC · NetScaler Gateway
- 3
- Delta Electronics COMMGR
- 2
Critical 11
- CVE-2025-22408In rfc_check_send_cmd of rfc_utils.cc, there is a possible way to execute arbitrary code due to a use after free.Google Android
- CVE-2025-22403In sdp_snd_service_search_req of sdp_discovery.cc, there is a possible way to execute arbitrary code due to a use after free.Google Android
- CVE-2025-0075In process_service_search_attr_req of sdp_server.cc, there is a possible way to execute arbitrary code due to a use after free.Google Android
- CVE-2025-0074In process_service_attr_rsp of sdp_discovery.cc, there is a possible way to execute arbitrary code due to a use after free.Google Android
- CVE-2025-35115Agiloft insecure download of system packagesAgiloft
- CVE-2025-7775Memory overflow vulnerability leading to Remote Code Execution and/or Denial of ServiceNetScaler ADC · NetScaler Gateway
- CVE-2025-41702egOS WebGUI Hard-Coded JWT Secret Enables Authentication BypassWelotec EG400Mk2-D11001-000101 · Welotec EG400Mk2-D1110… +22
- CVE-2024-39335Supported versions of Mahara 24.04 before 24.04.1 and 23.04 before 23.04.6 are vulnerable to information being disclosed to an institution a
- CVE-2025-52353An arbitrary code execution vulnerability in Badaso CMS 2.9.11.badaso/core
- CVE-2025-55443Telpo MDM 1.4.6 thru 1.4.9 for Android contains sensitive administrator credentials and MQTT server connection details (IP/port) that are st
- CVE-2025-55526n8n-workflows Main Commit ee25413 allows attackers to execute a directory traversal via the download_workflow function within api_server.py
High 47
- CVE-2025-22412In multiple functions of sdp_server.cc, there is a possible use after free due to a logic error in the code.Google Android
- CVE-2025-22411In process_service_attr_rsp of sdp_discovery.cc, there is a possible use after free due to a logic error in the code.Google Android
- CVE-2025-22410In multiple locations, there is a possible way to execute arbitrary code due to a use after free.Google Android
- CVE-2025-22409In rfc_send_buf_uih of rfc_ts_frames.cc, there is a possible way to execute arbitrary code due to a use after free.Google Android
- CVE-2025-22406In bnepu_check_send_packet of bnep_utils.cc, there is a possible way to achieve code execution due to a use after free.Google Android
- CVE-2025-22405In multiple locations, there is a possible way to execute arbitrary code due to a use after free.Google Android
- CVE-2025-22404In avct_lcb_msg_ind of avct_lcb_act.cc, there is a possible way to execute arbitrary code due to a use after free.Google Android
- CVE-2025-0093In handleBondStateChanged of AdapterService.java, there is a possible unapproved data access due to a missing permission check.Google Android
- CVE-2025-0084In multiple locations, there is a possible out of bounds write due to a use after free.Google Android
- CVE-2025-0081In dng_lossless_decoder::HuffDecode of dng_lossless_jpeg.cpp, there is a possible way to cause a crash due to uninitialized data.Google Android
- CVE-2025-0080In multiple locations, there is a possible way to overlay the installation confirmation dialog due to a tapjacking/overlay attack.Google Android
- CVE-2025-0079In multiple locations, there is a possible way that avdtp and avctp channels could be unencrypted due to a logic error in the code.Google Android
- CVE-2025-0078In main of main.cpp, there is a possible way to bypass SELinux due to a logic error in the code.Google Android
- CVE-2023-21125In btif_hh_hsdata_rpt_copy_cb of bta_hh.cc, there is a possible way to corrupt memory due to a use after free.Google Android
- CVE-2025-57820Svelte devalue vulnerable to prototype pollutionsveltejs devalue · devalue
- CVE-2025-35114Agiloft local privilege escalation via default credentialsAgiloft
- CVE-2025-9478Use after free in ANGLE in Google Chrome prior to 139.0.7258.154 allowed a remote attacker to potentially exploit heap corruption via a crafGoogle Chrome
- CVE-2025-23315NVIDIA NeMo Framework for all platforms contains a vulnerability in the export and deploy component, where malicious data created by an attaNVIDIA NeMo Framework
- CVE-2025-23314NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cauNVIDIA NeMo Framework
- CVE-2025-23313NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cauNVIDIA NeMo Framework
- CVE-2025-23312NVIDIA NeMo Framework for all platforms contains a vulnerability in the retrieval services component, where malicious data created by an attNVIDIA NeMo Framework
- CVE-2025-23307NVIDIA NeMo Curator for all platforms contains a vulnerability where a malicious file created by an attacker could allow code injection.NVIDIA NeMo Curator
- CVE-2025-57803ImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflowImageMagick · Magick.NET-Q16-AnyCPU +5
- CVE-2025-55298ImageMagick Format String Bug in InterpretImageFilename leads to arbitrary code executionImageMagick · Magick.NET-Q16-AnyCPU +17
- CVE-2025-1994IBM Cognos Command Center code executionIBM Cognos Command Center
- CVE-2025-2697IBM Cognos Command Center HTTP Open RedirectIBM Cognos Command Center
- CVE-2025-36729RACOM M!DGE2 Privilege Escalation via SDK Testing EndpointRACOM M!DGE2
- CVE-2025-9491Microsoft Windows LNK File UI Misrepresentation Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-57810jsPDF Parsing of Corrupt PNGs Leads to Potential Denial of Service (DoS)parallax jsPDF · jspdf
- CVE-2025-6366Event List <= 2.0.4 - Authenticated (Subscriber+) Privilege Escalationovatheme.com Event List
- CVE-2025-9483Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 singlePortForwardAdd stack-based overflowLinksys RE6250 · Linksys RE6300 +4
- CVE-2025-9482Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 portRangeForwardAdd stack-based overflowLinksys RE6250 · Linksys RE6300 +4
- CVE-2025-9481Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setIpv6 stack-based overflowLinksys RE6250 · Linksys RE6300 +4
- CVE-2025-8424Improper access control on the NetScaler Management InterfaceNetScaler ADC · NetScaler Gateway
- CVE-2025-7776Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of ServiceNetScaler ADC · NetScaler Gateway
- CVE-2025-29901File Station 5QNAP Systems File Station
- CVE-2025-53419COMMGR Code Injection VulnerabilityDelta Electronics COMMGR
- CVE-2025-53418COMMGR Stack-based Buffer Overflow VulnerabilityDelta Electronics COMMGR
- CVE-2025-5931Dokan Pro <= 4.0.5 - Authenticated (Vendor+) Privilege Escalationwedevs Dokan Pro
- CVE-2025-9172Vibes <= 2.2.0 - Unauthenticated SQL Injection via `resource` Parameterpierrelannoy Vibes
- CVE-2025-9443Tenda CH22 editUserName formeditUserName buffer overflowTenda CH22
- CVE-2025-8447Incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed read-only accessGitHub Enterprise Server
- CVE-2024-47853An issue was discovered in Mahara 23.04.8 and 24.04.4.
- CVE-2025-29992Mahara before 24.04.9 exposes database connection information if the database becomes unreachable, e.g., due to the database server being te
- CVE-2025-50753Mitrastar GPT-2741GNAC-N2 devices are provided with access through ssh into a restricted default shell.The command "deviceinfo show file" is
- CVE-2025-50971Directory traversal vulnerability in AbanteCart version 1.4.2 allows unauthenticated attackers to gain access to sensitive system files via
- CVE-2025-52218SelectZero Data Observability Platform before 2025.5.2 is vulnerable to Content Spoofing / Text Injection.
Medium, low and unrated 68
- CVE-2025-8490All-in-One WP Migration and Backup <= 7.97 - Authenticated (Administrator+) Stored Cross-Site Scripting via Importservmask All-in-One WP Migration and Backup
- CVE-2025-26417In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening files in shared storageGoogle Android
- CVE-2025-22413In multiple functions of hyp-main.c, there is a possible privilege escalation due to a logic error in the code.Google Android
- CVE-2025-22407In hidd_check_config_done of hidd_conn.cc, there is a possible way to execute arbitrary code due to a use after free.Google Android
- CVE-2025-0092In handleBondStateChanged of AdapterService.java, there is a possible permission bypass due to misleading or insufficient UI.Google Android
- CVE-2025-0086In onResult of AccountManagerService.java, there is a possible way to overwrite auth token due to a missing permission check.Google Android
- CVE-2025-0083In multiple locations, there is a possible way to access content across user profiles due to URI double encoding.Google Android
- CVE-2025-0082In multiple functions of StatusHint.java and TelecomServiceImpl.java, there is a possible way to reveal images across users due to a confuseGoogle Android
- CVE-2024-49740In multiple locations, there is a possible crash loop due to resource exhaustion.Google Android
- CVE-2025-9277SiteSEO – SEO Simplified <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Broken Regex Expressionsoftaculous SiteSEO – SEO Simplified
- CVE-2025-35112Agiloft XML external entity local path traversalAgiloft
- CVE-2025-35113Agiloft improper neutralization in EUI template engineAgiloft
- CVE-2025-9492Campcodes Online Water Billing System addclient1.php sql injectionCampcodes Online Water Billing System
- CVE-2025-57818Firecrawl SSRF Vulnerability via malicious webhookfirecrawl
- CVE-2025-1494IBM Cognos Command Center clickjackingIBM Cognos Command Center
- CVE-2025-55212ImageMagick affected by divide-by-zero in ThumbnailImage via montage -geometry ":" leads to crashImageMagick · Magick.NET-Q16-AnyCPU +17
- CVE-2025-57813Insertion of Sensitive Information into Log File in github.com/traPtitech/traQtraPtitech traQ · github.com/traPtitech/traQ
- CVE-2025-38676iommu/amd: Avoid stack buffer overflow from kernel cmdlineLinux
- CVE-2025-8700Privilege Escalation via get-task-allow entitlement in Invoice NinjaInvoice Ninja
- CVE-2025-8597Privilege Escalation via get-task-allow entitlement in MacVim.appMacVim
- CVE-2025-9190TCC Bypass via misconfigured Node fuses in CursorCursor
- CVE-2025-53813TCC Bypass via misconfigured Node fuses in NozbeNozbe
- CVE-2025-53811TCC Bypass via misconfigured Node fuses in Mosh-ProMosh-Pro
- CVE-2025-44002Arbitrary File Creation via Symbolic Link leading to Denial-of-ServiceTeamViewer Full Client · TeamViewer Host
- CVE-2025-1501Incorrect authorization for traces request/download in CMC before 25.1.0Nozomi Networks CMC
- CVE-2025-48108WordPress School Management Plugin <= 93.2.0 - Broken Access Control VulnerabilityMojoomla School Management
- CVE-2025-6247WordPress Automatic Plugin - AI content generator and auto poster plugin <= 3.118.0 - Cross-Site Request Forgery to Stored Cross-Site ScriptingValvePress WordPress Automatic Plugin
- CVE-2024-8860Tourfic <= 2.14.5 - Missing Authorization in Multiple Functionsthemefic Tourfic – Travel Booking, Hotel Booking & Car Rent…
- CVE-2025-57704EIP Builder XML External Entity Processing Information Disclosure VulnerabilityDelta Electronics EIP Builder
- CVE-2025-9476SourceCodester Human Resource Information System editemployee_process.php unrestricted uploadSourceCodester Human Resource Information System
- CVE-2025-9475SourceCodester Human Resource Information System editemployee_process.php unrestricted uploadSourceCodester Human Resource Information System
- CVE-2025-9474Mihomo Party Socket sysproxy.ts enableSysProxy temp fileMihomo Party
- CVE-2025-9473SourceCodester Online Bank Management System feedback.php sql injectionSourceCodester Online Bank Management System
- CVE-2025-9472itsourcecode Apartment Management System add_owner_utility.php sql injectionitsourcecode Apartment Management System
- CVE-2025-9471itsourcecode Apartment Management System add_maintenance_cost.php sql injectionitsourcecode Apartment Management System
- CVE-2025-9470itsourcecode Apartment Management System add_m_committee.php sql injectionitsourcecode Apartment Management System
- CVE-2025-9469itsourcecode Apartment Management System add_fund.php sql injectionitsourcecode Apartment Management System
- CVE-2025-9468itsourcecode Apartment Management System add_bill.php sql injectionitsourcecode Apartment Management System
- CVE-2025-9461diyhi bbs File Compression FilePackageManageAction.java information disclosurediyhi bbs
- CVE-2025-94441000projects Online Project Report Submission and Evaluation System delete_group_student.php sql injection1000projects Online Project Report Submission and Evaluatio…
- CVE-2025-94401000projects Online Project Report Submission and Evaluation System add_title.php cross site scripting1000projects Online Project Report Submission and Evaluatio…
- CVE-2025-94391000projects Online Project Report Submission and Evaluation System edit_faculty.php cross site scripting1000projects Online Project Report Submission and Evaluatio…
- CVE-2025-94381000projects Online Project Report Submission and Evaluation System add_student.php cross site scripting1000projects Online Project Report Submission and Evaluatio…
- CVE-2025-94341000projects Online Project Report Submission and Evaluation System edit_title.php cross site scripting1000projects Online Project Report Submission and Evaluatio…
- CVE-2025-9433mtons mblog Admin Panel list cross site scriptingmtons mblog
- CVE-2025-9432mtons mblog Admin Panel list cross site scriptingmtons mblog
- CVE-2025-9431mtons mblog search cross site scriptingmtons mblog
- CVE-2025-9430mtons mblog update cross site scriptingmtons mblog
- CVE-2024-35203Mahara before 22.10.6, 23.04.6, and 24.04.1 allows cross-site scripting (XSS) via a file, with JavaScript code as part of its name, that is
- CVE-2024-45753In Mahara 23.04.8 and 24.04.4, the external RSS feed block can cause XSS if the external feed XML has a malicious value for the link attribu
- CVE-2024-47192An issue was discovered in Mahara 23.04.8 and 24.04.4.
- CVE-2025-25732Incorrect access control in the EEPROM component of Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.4
- CVE-2025-25733Incorrect access control in the SPI Flash Chip of Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42,
- CVE-2025-25734Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 was discovered to contain an u
- CVE-2025-25735Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to lack SPI Pr
- CVE-2025-25736Kapsch TrafficCom RIS-9260 RSU LEO v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to contain Android Debug Bridge (ADB) p
- CVE-2025-25737Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to lack secure
- CVE-2025-50974The Calamaris log exporter CGI (/cgi-bin/logs.cgi/calamaris.dat) in IPFire 2.29 does not properly sanitize user-supplied input before incorp
- CVE-2025-50975IPFire 2.29 web-based firewall interface (firewall.cgi) fails to sanitize several rule parameters such as PROT, SRC_PORT, TGT_PORT, dnatport
- CVE-2025-50976IPFire 2.29 DNS management interface (dns.cgi) fails to properly sanitize user-supplied input in the NAMESERVER, REMARK, and TLS_HOSTNAME qu
- CVE-2025-52035A vulnerability in NotesCMS and specifically in the page /index.php?route=notes.
- CVE-2025-52036A vulnerability has been found in NotesCMS and classified as medium.
- CVE-2025-52037A vulnerability has been found in NotesCMS and classified as medium.
- CVE-2025-52184Cross Site Scripting vulnerability in Helpy.io v.2.8.0 allows a remote attacker to escalate privileges via the New Topic Ticket funtion.
- CVE-2025-52217SelectZero Data Observability Platform before 2025.5.2 is vulnerable to HTML Injection.
- CVE-2025-52219SelectZero SelectZero Data Observability Platform before 2025.5.2 contains an Open Redirect vulnerability.
- CVE-2025-56432A cross-site scripting (XSS) vulnerability exists in Nagios XI 2024R2.
- CVE-2025-57425A Stored Cross-Site Scripting (XSS) vulnerability in SourceCodester FAQ Management System 1.0 allows an authenticated attacker to inject mal