# CVEs published 2025-08-26

126 CVEs were published on August 26, 2025: 11 critical, 47 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2025-8490](https://cve.now/CVE-2025-8490.md): All-in-One WP Migration and Backup \<= 7.97 - Authenticated (Administrator+) Stored Cross-Site Scripting via Import (CVSS 4.4, servmask All-in-One WP Migration and Backup)
- [CVE-2025-26417](https://cve.now/CVE-2025-26417.md): In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening files in shared storage (CVSS 4.0, Google Android)
- [CVE-2025-22413](https://cve.now/CVE-2025-22413.md): In multiple functions of hyp-main.c, there is a possible privilege escalation due to a logic error in the code. (CVSS 4.0, Google Android)
- [CVE-2025-22412](https://cve.now/CVE-2025-22412.md): In multiple functions of sdp\_server.cc, there is a possible use after free due to a logic error in the code. (CVSS 8.8, Google Android)
- [CVE-2025-22411](https://cve.now/CVE-2025-22411.md): In process\_service\_attr\_rsp of sdp\_discovery.cc, there is a possible use after free due to a logic error in the code. (CVSS 8.8, Google Android)
- [CVE-2025-22410](https://cve.now/CVE-2025-22410.md): In multiple locations, there is a possible way to execute arbitrary code due to a use after free. (CVSS 8.4, Google Android)
- [CVE-2025-22409](https://cve.now/CVE-2025-22409.md): In rfc\_send\_buf\_uih of rfc\_ts\_frames.cc, there is a possible way to execute arbitrary code due to a use after free. (CVSS 8.4, Google Android)
- [CVE-2025-22408](https://cve.now/CVE-2025-22408.md): In rfc\_check\_send\_cmd of rfc\_utils.cc, there is a possible way to execute arbitrary code due to a use after free. (CVSS 9.8, Google Android)
- [CVE-2025-22407](https://cve.now/CVE-2025-22407.md): In hidd\_check\_config\_done of hidd\_conn.cc, there is a possible way to execute arbitrary code due to a use after free. (CVSS 5.5, Google Android)
- [CVE-2025-22406](https://cve.now/CVE-2025-22406.md): In bnepu\_check\_send\_packet of bnep\_utils.cc, there is a possible way to achieve code execution due to a use after free. (CVSS 8.4, Google Android)
- [CVE-2025-22405](https://cve.now/CVE-2025-22405.md): In multiple locations, there is a possible way to execute arbitrary code due to a use after free. (CVSS 8.4, Google Android)
- [CVE-2025-22404](https://cve.now/CVE-2025-22404.md): In avct\_lcb\_msg\_ind of avct\_lcb\_act.cc, there is a possible way to execute arbitrary code due to a use after free. (CVSS 8.4, Google Android)
- [CVE-2025-22403](https://cve.now/CVE-2025-22403.md): In sdp\_snd\_service\_search\_req of sdp\_discovery.cc, there is a possible way to execute arbitrary code due to a use after free. (CVSS 9.8, Google Android)
- [CVE-2025-0093](https://cve.now/CVE-2025-0093.md): In handleBondStateChanged of AdapterService.java, there is a possible unapproved data access due to a missing permission check. (CVSS 7.5, Google Android)
- [CVE-2025-0092](https://cve.now/CVE-2025-0092.md): In handleBondStateChanged of AdapterService.java, there is a possible permission bypass due to misleading or insufficient UI. (CVSS 6.5, Google Android)
- [CVE-2025-0086](https://cve.now/CVE-2025-0086.md): In onResult of AccountManagerService.java, there is a possible way to overwrite auth token due to a missing permission check. (CVSS 6.2, Google Android)
- [CVE-2025-0084](https://cve.now/CVE-2025-0084.md): In multiple locations, there is a possible out of bounds write due to a use after free. (CVSS 8.8, Google Android)
- [CVE-2025-0083](https://cve.now/CVE-2025-0083.md): In multiple locations, there is a possible way to access content across user profiles due to URI double encoding. (CVSS 4.0, Google Android)
- [CVE-2025-0082](https://cve.now/CVE-2025-0082.md): In multiple functions of StatusHint.java and TelecomServiceImpl.java, there is a possible way to reveal images across users due to a confuse (CVSS 5.5, Google Android)
- [CVE-2025-0081](https://cve.now/CVE-2025-0081.md): In dng\_lossless\_decoder::HuffDecode of dng\_lossless\_jpeg.cpp, there is a possible way to cause a crash due to uninitialized data. (CVSS 7.5, Google Android)
- [CVE-2025-0080](https://cve.now/CVE-2025-0080.md): In multiple locations, there is a possible way to overlay the installation confirmation dialog due to a tapjacking/overlay attack. (CVSS 7.8, Google Android)
- [CVE-2025-0079](https://cve.now/CVE-2025-0079.md): In multiple locations, there is a possible way that avdtp and avctp channels could be unencrypted due to a logic error in the code. (CVSS 7.8, Google Android)
- [CVE-2025-0078](https://cve.now/CVE-2025-0078.md): In main of main.cpp, there is a possible way to bypass SELinux due to a logic error in the code. (CVSS 8.8, Google Android)
- [CVE-2025-0075](https://cve.now/CVE-2025-0075.md): In process\_service\_search\_attr\_req of sdp\_server.cc, there is a possible way to execute arbitrary code due to a use after free. (CVSS 9.8, Google Android)
- [CVE-2025-0074](https://cve.now/CVE-2025-0074.md): In process\_service\_attr\_rsp of sdp\_discovery.cc, there is a possible way to execute arbitrary code due to a use after free. (CVSS 9.8, Google Android)
- [CVE-2024-49740](https://cve.now/CVE-2024-49740.md): In multiple locations, there is a possible crash loop due to resource exhaustion. (CVSS 5.5, Google Android)
- [CVE-2023-21125](https://cve.now/CVE-2023-21125.md): In btif\_hh\_hsdata\_rpt\_copy\_cb of bta\_hh.cc, there is a possible way to corrupt memory due to a use after free. (CVSS 8.0, Google Android)
- [CVE-2025-57820](https://cve.now/CVE-2025-57820.md): Svelte devalue vulnerable to prototype pollution (CVSS 7.9, sveltejs devalue · devalue)
- [CVE-2025-9277](https://cve.now/CVE-2025-9277.md): SiteSEO – SEO Simplified \<= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Broken Regex Expression (CVSS 6.4, softaculous SiteSEO – SEO Simplified)
- [CVE-2025-35112](https://cve.now/CVE-2025-35112.md): Agiloft XML external entity local path traversal (CVSS 4.1, Agiloft)
- [CVE-2025-35115](https://cve.now/CVE-2025-35115.md): Agiloft insecure download of system packages (CVSS 9.2, Agiloft)
- [CVE-2025-35114](https://cve.now/CVE-2025-35114.md): Agiloft local privilege escalation via default credentials (CVSS 7.5, Agiloft)
- [CVE-2025-35113](https://cve.now/CVE-2025-35113.md): Agiloft improper neutralization in EUI template engine (CVSS 5.9, Agiloft)
- [CVE-2025-9492](https://cve.now/CVE-2025-9492.md): Campcodes Online Water Billing System addclient1.php sql injection (CVSS 6.9, Campcodes Online Water Billing System)
- [CVE-2025-9478](https://cve.now/CVE-2025-9478.md): Use after free in ANGLE in Google Chrome prior to 139.0.7258.154 allowed a remote attacker to potentially exploit heap corruption via a craf (CVSS 8.8, Google Chrome)
- [CVE-2025-23315](https://cve.now/CVE-2025-23315.md): NVIDIA NeMo Framework for all platforms contains a vulnerability in the export and deploy component, where malicious data created by an atta (CVSS 7.8, NVIDIA NeMo Framework)
- [CVE-2025-23314](https://cve.now/CVE-2025-23314.md): NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cau (CVSS 7.8, NVIDIA NeMo Framework)
- [CVE-2025-23313](https://cve.now/CVE-2025-23313.md): NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cau (CVSS 7.8, NVIDIA NeMo Framework)
- [CVE-2025-23312](https://cve.now/CVE-2025-23312.md): NVIDIA NeMo Framework for all platforms contains a vulnerability in the retrieval services component, where malicious data created by an att (CVSS 7.8, NVIDIA NeMo Framework)
- [CVE-2025-23307](https://cve.now/CVE-2025-23307.md): NVIDIA NeMo Curator for all platforms contains a vulnerability where a malicious file created by an attacker could allow code injection. (CVSS 7.8, NVIDIA NeMo Curator)
- [CVE-2025-57818](https://cve.now/CVE-2025-57818.md): Firecrawl SSRF Vulnerability via malicious webhook (CVSS 6.3, firecrawl)
- [CVE-2025-57803](https://cve.now/CVE-2025-57803.md): ImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflow (CVSS 7.5, ImageMagick · Magick.NET-Q16-AnyCPU +5)
- [CVE-2025-55298](https://cve.now/CVE-2025-55298.md): ImageMagick Format String Bug in InterpretImageFilename leads to arbitrary code execution (CVSS 7.5, ImageMagick · Magick.NET-Q16-AnyCPU +17)
- [CVE-2025-1994](https://cve.now/CVE-2025-1994.md): IBM Cognos Command Center code execution (CVSS 7.8, IBM Cognos Command Center)
- [CVE-2025-2697](https://cve.now/CVE-2025-2697.md): IBM Cognos Command Center HTTP Open Redirect (CVSS 7.4, IBM Cognos Command Center)
- [CVE-2025-1494](https://cve.now/CVE-2025-1494.md): IBM Cognos Command Center clickjacking (CVSS 6.1, IBM Cognos Command Center)
- [CVE-2025-55212](https://cve.now/CVE-2025-55212.md): ImageMagick affected by divide-by-zero in ThumbnailImage via montage -geometry ":" leads to crash (CVSS 3.7, ImageMagick · Magick.NET-Q16-AnyCPU +17)
- [CVE-2025-36729](https://cve.now/CVE-2025-36729.md): RACOM M!DGE2 Privilege Escalation via SDK Testing Endpoint (CVSS 7.2, RACOM M!DGE2)
- [CVE-2025-9491](https://cve.now/CVE-2025-9491.md): Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2025-57813](https://cve.now/CVE-2025-57813.md): Insertion of Sensitive Information into Log File in github.com/traPtitech/traQ (CVSS 5.9, traPtitech traQ · github.com/traPtitech/traQ)
- [CVE-2025-57810](https://cve.now/CVE-2025-57810.md): jsPDF Parsing of Corrupt PNGs Leads to Potential Denial of Service (DoS) (CVSS 8.7, parallax jsPDF · jspdf)
- [CVE-2025-6366](https://cve.now/CVE-2025-6366.md): Event List \<= 2.0.4 - Authenticated (Subscriber+) Privilege Escalation (CVSS 8.8, ovatheme.com Event List)
- [CVE-2025-9483](https://cve.now/CVE-2025-9483.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 singlePortForwardAdd stack-based overflow (CVSS 8.7, Linksys RE6250 · Linksys RE6300 +4)
- [CVE-2025-9482](https://cve.now/CVE-2025-9482.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 portRangeForwardAdd stack-based overflow (CVSS 8.7, Linksys RE6250 · Linksys RE6300 +4)
- [CVE-2025-9481](https://cve.now/CVE-2025-9481.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setIpv6 stack-based overflow (CVSS 8.7, Linksys RE6250 · Linksys RE6300 +4)
- [CVE-2025-8424](https://cve.now/CVE-2025-8424.md): Improper access control on the NetScaler Management Interface (CVSS 8.7, NetScaler ADC · NetScaler Gateway)
- [CVE-2025-38676](https://cve.now/CVE-2025-38676.md): iommu/amd: Avoid stack buffer overflow from kernel cmdline (no CVSS, Linux)
- [CVE-2025-7776](https://cve.now/CVE-2025-7776.md): Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service (CVSS 8.8, NetScaler ADC · NetScaler Gateway)
- [CVE-2025-7775](https://cve.now/CVE-2025-7775.md): Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service (CVSS 9.2, KEV, NetScaler ADC · NetScaler Gateway)
- [CVE-2025-8700](https://cve.now/CVE-2025-8700.md): Privilege Escalation via get-task-allow entitlement in Invoice Ninja (CVSS 4.8, Invoice Ninja)
- [CVE-2025-8597](https://cve.now/CVE-2025-8597.md): Privilege Escalation via get-task-allow entitlement in MacVim.app (CVSS 4.8, MacVim)
- [CVE-2025-9190](https://cve.now/CVE-2025-9190.md): TCC Bypass via misconfigured Node fuses in Cursor (CVSS 4.8, Cursor)
- [CVE-2025-53813](https://cve.now/CVE-2025-53813.md): TCC Bypass via misconfigured Node fuses in Nozbe (CVSS 4.8, Nozbe)
- [CVE-2025-53811](https://cve.now/CVE-2025-53811.md): TCC Bypass via misconfigured Node fuses in Mosh-Pro (CVSS 4.8, Mosh-Pro)
- [CVE-2025-44002](https://cve.now/CVE-2025-44002.md): Arbitrary File Creation via Symbolic Link leading to Denial-of-Service (CVSS 6.1, TeamViewer Full Client · TeamViewer Host)
- [CVE-2025-1501](https://cve.now/CVE-2025-1501.md): Incorrect authorization for traces request/download in CMC before 25.1.0 (CVSS 5.3, Nozomi Networks CMC)
- [CVE-2025-48108](https://cve.now/CVE-2025-48108.md): WordPress School Management Plugin \<= 93.2.0 - Broken Access Control Vulnerability (CVSS 6.5, Mojoomla School Management)
- [CVE-2025-29901](https://cve.now/CVE-2025-29901.md): File Station 5 (CVSS 7.1, QNAP Systems File Station)
- [CVE-2025-6247](https://cve.now/CVE-2025-6247.md): WordPress Automatic Plugin - AI content generator and auto poster plugin \<= 3.118.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 4.7, ValvePress WordPress Automatic Plugin)
- [CVE-2024-8860](https://cve.now/CVE-2024-8860.md): Tourfic \<= 2.14.5 - Missing Authorization in Multiple Functions (CVSS 4.3, themefic Tourfic – Travel Booking, Hotel Booking & Car Rent…)
- [CVE-2025-53419](https://cve.now/CVE-2025-53419.md): COMMGR Code Injection Vulnerability (CVSS 7.8, Delta Electronics COMMGR)
- [CVE-2025-53418](https://cve.now/CVE-2025-53418.md): COMMGR Stack-based Buffer Overflow Vulnerability (CVSS 8.6, Delta Electronics COMMGR)
- [CVE-2025-57704](https://cve.now/CVE-2025-57704.md): EIP Builder XML External Entity Processing Information Disclosure Vulnerability (CVSS 5.5, Delta Electronics EIP Builder)
- [CVE-2025-41702](https://cve.now/CVE-2025-41702.md): egOS WebGUI Hard-Coded JWT Secret Enables Authentication Bypass (CVSS 9.8, Welotec EG400Mk2-D11001-000101 · Welotec EG400Mk2-D1110… +22)
- [CVE-2025-9476](https://cve.now/CVE-2025-9476.md): SourceCodester Human Resource Information System editemployee\_process.php unrestricted upload (CVSS 6.9, SourceCodester Human Resource Information System)
- [CVE-2025-9475](https://cve.now/CVE-2025-9475.md): SourceCodester Human Resource Information System editemployee\_process.php unrestricted upload (CVSS 6.9, SourceCodester Human Resource Information System)
- [CVE-2025-5931](https://cve.now/CVE-2025-5931.md): Dokan Pro \<= 4.0.5 - Authenticated (Vendor+) Privilege Escalation (CVSS 8.8, wedevs Dokan Pro)
- [CVE-2025-9474](https://cve.now/CVE-2025-9474.md): Mihomo Party Socket sysproxy.ts enableSysProxy temp file (CVSS 2.0, Mihomo Party)
- [CVE-2025-9473](https://cve.now/CVE-2025-9473.md): SourceCodester Online Bank Management System feedback.php sql injection (CVSS 6.9, SourceCodester Online Bank Management System)
- [CVE-2025-9472](https://cve.now/CVE-2025-9472.md): itsourcecode Apartment Management System add\_owner\_utility.php sql injection (CVSS 6.9, itsourcecode Apartment Management System)
- [CVE-2025-9471](https://cve.now/CVE-2025-9471.md): itsourcecode Apartment Management System add\_maintenance\_cost.php sql injection (CVSS 6.9, itsourcecode Apartment Management System)
- [CVE-2025-9470](https://cve.now/CVE-2025-9470.md): itsourcecode Apartment Management System add\_m\_committee.php sql injection (CVSS 6.9, itsourcecode Apartment Management System)
- [CVE-2025-9469](https://cve.now/CVE-2025-9469.md): itsourcecode Apartment Management System add\_fund.php sql injection (CVSS 6.9, itsourcecode Apartment Management System)
- [CVE-2025-9468](https://cve.now/CVE-2025-9468.md): itsourcecode Apartment Management System add\_bill.php sql injection (CVSS 6.9, itsourcecode Apartment Management System)
- [CVE-2025-9172](https://cve.now/CVE-2025-9172.md): Vibes \<= 2.2.0 - Unauthenticated SQL Injection via \`resource\` Parameter (CVSS 7.5, pierrelannoy Vibes)
- [CVE-2025-9461](https://cve.now/CVE-2025-9461.md): diyhi bbs File Compression FilePackageManageAction.java information disclosure (CVSS 5.3, diyhi bbs)
- [CVE-2025-9444](https://cve.now/CVE-2025-9444.md): 1000projects Online Project Report Submission and Evaluation System delete\_group\_student.php sql injection (CVSS 6.9, 1000projects Online Project Report Submission and Evaluatio…)
- [CVE-2025-9443](https://cve.now/CVE-2025-9443.md): Tenda CH22 editUserName formeditUserName buffer overflow (CVSS 8.7, Tenda CH22)
- [CVE-2025-9440](https://cve.now/CVE-2025-9440.md): 1000projects Online Project Report Submission and Evaluation System add\_title.php cross site scripting (CVSS 5.3, 1000projects Online Project Report Submission and Evaluatio…)
- [CVE-2025-9439](https://cve.now/CVE-2025-9439.md): 1000projects Online Project Report Submission and Evaluation System edit\_faculty.php cross site scripting (CVSS 5.3, 1000projects Online Project Report Submission and Evaluatio…)
- [CVE-2025-8447](https://cve.now/CVE-2025-8447.md): Incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed read-only access (CVSS 7.0, GitHub Enterprise Server)
- [CVE-2025-9438](https://cve.now/CVE-2025-9438.md): 1000projects Online Project Report Submission and Evaluation System add\_student.php cross site scripting (CVSS 5.3, 1000projects Online Project Report Submission and Evaluatio…)
- [CVE-2025-9434](https://cve.now/CVE-2025-9434.md): 1000projects Online Project Report Submission and Evaluation System edit\_title.php cross site scripting (CVSS 5.3, 1000projects Online Project Report Submission and Evaluatio…)
- [CVE-2025-9433](https://cve.now/CVE-2025-9433.md): mtons mblog Admin Panel list cross site scripting (CVSS 5.3, mtons mblog)
- [CVE-2025-9432](https://cve.now/CVE-2025-9432.md): mtons mblog Admin Panel list cross site scripting (CVSS 5.3, mtons mblog)
- [CVE-2025-9431](https://cve.now/CVE-2025-9431.md): mtons mblog search cross site scripting (CVSS 5.3, mtons mblog)
- [CVE-2025-9430](https://cve.now/CVE-2025-9430.md): mtons mblog update cross site scripting (CVSS 4.8, mtons mblog)
- [CVE-2024-35203](https://cve.now/CVE-2024-35203.md): Mahara before 22.10.6, 23.04.6, and 24.04.1 allows cross-site scripting (XSS) via a file, with JavaScript code as part of its name, that is (CVSS 6.1)
- [CVE-2024-39335](https://cve.now/CVE-2024-39335.md): Supported versions of Mahara 24.04 before 24.04.1 and 23.04 before 23.04.6 are vulnerable to information being disclosed to an institution a (CVSS 9.1)
- [CVE-2024-45753](https://cve.now/CVE-2024-45753.md): In Mahara 23.04.8 and 24.04.4, the external RSS feed block can cause XSS if the external feed XML has a malicious value for the link attribu (CVSS 6.1)
- [CVE-2024-47192](https://cve.now/CVE-2024-47192.md): An issue was discovered in Mahara 23.04.8 and 24.04.4. (CVSS 5.3)
- [CVE-2024-47853](https://cve.now/CVE-2024-47853.md): An issue was discovered in Mahara 23.04.8 and 24.04.4. (CVSS 8.8)
- [CVE-2025-25732](https://cve.now/CVE-2025-25732.md): Incorrect access control in the EEPROM component of Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.4 (CVSS 6.8)
- [CVE-2025-25733](https://cve.now/CVE-2025-25733.md): Incorrect access control in the SPI Flash Chip of Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, (CVSS 3.5)
- [CVE-2025-25734](https://cve.now/CVE-2025-25734.md): Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 was discovered to contain an u (CVSS 6.8)
- [CVE-2025-25735](https://cve.now/CVE-2025-25735.md): Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to lack SPI Pr (CVSS 4.6)
- [CVE-2025-25736](https://cve.now/CVE-2025-25736.md): Kapsch TrafficCom RIS-9260 RSU LEO v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to contain Android Debug Bridge (ADB) p (CVSS 6.8)
- [CVE-2025-25737](https://cve.now/CVE-2025-25737.md): Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to lack secure (CVSS 6.8)
- [CVE-2025-29992](https://cve.now/CVE-2025-29992.md): Mahara before 24.04.9 exposes database connection information if the database becomes unreachable, e.g., due to the database server being te (CVSS 7.5)
- [CVE-2025-50753](https://cve.now/CVE-2025-50753.md): Mitrastar GPT-2741GNAC-N2 devices are provided with access through ssh into a restricted default shell.The command "deviceinfo show file" is (CVSS 8.4)
- [CVE-2025-50971](https://cve.now/CVE-2025-50971.md): Directory traversal vulnerability in AbanteCart version 1.4.2 allows unauthenticated attackers to gain access to sensitive system files via (CVSS 7.5)
- [CVE-2025-50974](https://cve.now/CVE-2025-50974.md): The Calamaris log exporter CGI (/cgi-bin/logs.cgi/calamaris.dat) in IPFire 2.29 does not properly sanitize user-supplied input before incorp (CVSS 6.5)
- [CVE-2025-50975](https://cve.now/CVE-2025-50975.md): IPFire 2.29 web-based firewall interface (firewall.cgi) fails to sanitize several rule parameters such as PROT, SRC\_PORT, TGT\_PORT, dnatport (CVSS 5.4)
- [CVE-2025-50976](https://cve.now/CVE-2025-50976.md): IPFire 2.29 DNS management interface (dns.cgi) fails to properly sanitize user-supplied input in the NAMESERVER, REMARK, and TLS\_HOSTNAME qu (CVSS 6.1)
- [CVE-2025-52035](https://cve.now/CVE-2025-52035.md): A vulnerability in NotesCMS and specifically in the page /index.php?route=notes. (CVSS 6.1)
- [CVE-2025-52036](https://cve.now/CVE-2025-52036.md): A vulnerability has been found in NotesCMS and classified as medium. (CVSS 6.1)
- [CVE-2025-52037](https://cve.now/CVE-2025-52037.md): A vulnerability has been found in NotesCMS and classified as medium. (CVSS 6.1)
- [CVE-2025-52184](https://cve.now/CVE-2025-52184.md): Cross Site Scripting vulnerability in Helpy.io v.2.8.0 allows a remote attacker to escalate privileges via the New Topic Ticket funtion. (CVSS 6.1)
- [CVE-2025-52217](https://cve.now/CVE-2025-52217.md): SelectZero Data Observability Platform before 2025.5.2 is vulnerable to HTML Injection. (CVSS 5.4)
- [CVE-2025-52218](https://cve.now/CVE-2025-52218.md): SelectZero Data Observability Platform before 2025.5.2 is vulnerable to Content Spoofing / Text Injection. (CVSS 7.5)
- [CVE-2025-52219](https://cve.now/CVE-2025-52219.md): SelectZero SelectZero Data Observability Platform before 2025.5.2 contains an Open Redirect vulnerability. (CVSS 6.5)
- [CVE-2025-52353](https://cve.now/CVE-2025-52353.md): An arbitrary code execution vulnerability in Badaso CMS 2.9.11. (CVSS 9.8, badaso/core)
- [CVE-2025-55443](https://cve.now/CVE-2025-55443.md): Telpo MDM 1.4.6 thru 1.4.9 for Android contains sensitive administrator credentials and MQTT server connection details (IP/port) that are st (CVSS 9.1)
- [CVE-2025-55526](https://cve.now/CVE-2025-55526.md): n8n-workflows Main Commit ee25413 allows attackers to execute a directory traversal via the download\_workflow function within api\_server.py (CVSS 9.1)
- [CVE-2025-56432](https://cve.now/CVE-2025-56432.md): A cross-site scripting (XSS) vulnerability exists in Nagios XI 2024R2. (CVSS 6.1)
- [CVE-2025-57425](https://cve.now/CVE-2025-57425.md): A Stored Cross-Site Scripting (XSS) vulnerability in SourceCodester FAQ Management System 1.0 allows an authenticated attacker to inject mal (CVSS 6.1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-08-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.