# CVEs published 2025-09-19

120 CVEs were published on September 19, 2025: 13 critical, 47 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2025-43808](https://cve.now/CVE-2025-43808.md): The Commerce component in Liferay Portal 7.3.0 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10, (CVSS 6.9, Liferay Portal · Liferay DXP +1)
- [CVE-2025-10568](https://cve.now/CVE-2025-10568.md): HyperX NGENUITY - Arbitrary Code Execution (CVSS 5.2, HP HyperX NGENUITY)
- [CVE-2025-9081](https://cve.now/CVE-2025-9081.md): IDOR in board file download allows any user to download any file by UUID (CVSS 3.1, Mattermost · github.com/mattermost/mattermost-plugin-boa… +4)
- [CVE-2025-59431](https://cve.now/CVE-2025-59431.md): MapServer - WFS XML Filter Query SQL injection (CVSS 8.9, MapServer)
- [CVE-2025-9079](https://cve.now/CVE-2025-9079.md): Admin RCE via prepackaged plugins by way of misconfigured imports directory (CVSS 8.0, Mattermost · github.com/mattermost/mattermost-server +3)
- [CVE-2025-43809](https://cve.now/CVE-2025-43809.md): Cross-Site Request Forgery (CSRF) vulnerability in the server (license) registration page in Liferay Portal 7.4.0 through 7.4.3.111, and old (CVSS 5.1, Liferay Portal · Liferay DXP +1)
- [CVE-2022-4980](https://cve.now/CVE-2022-4980.md): General Bytes Crypto Application Server (CAS) Unauthenticated Creation of Admin Account via Default-installation/First-admin Page (CVSS 9.3, General Bytes Crypto Application Server)
- [CVE-2024-13990](https://cve.now/CVE-2024-13990.md): MicroWorld eScan AV Insecure Update Mechanism Allows Man-in-the-Middle Replacement of Updates (CVSS 9.3, MicroWorld Technologies eScan AV)
- [CVE-2025-26517](https://cve.now/CVE-2025-26517.md): CVE-2025-26517 Privilege Escalation Vulnerability in StorageGRID (formerly StorageGRID Webscale) (CVSS 5.4, NetApp StorageGRID)
- [CVE-2025-34191](https://cve.now/CVE-2025-34191.md): Vasion Print (formerly PrinterLogic) Arbitrary File Write as Root via Response Path Symlink Follow (CVSS 8.5, Vasion Print Virtual Appliance Host · Vasion Print Applicat…)
- [CVE-2025-26516](https://cve.now/CVE-2025-26516.md): CVE-2025-26516 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale) (CVSS 5.3, NetApp StorageGRID)
- [CVE-2025-34190](https://cve.now/CVE-2025-34190.md): Vasion Print (formerly PrinterLogic) PrinterInstallerClientService Authentication Bypass via LD\_PRELOAD Hooking (CVSS 8.5, Vasion Print Application · Vasion Print Virtual Appliance H…)
- [CVE-2025-34205](https://cve.now/CVE-2025-34205.md): Vasion Print (formerly PrinterLogic) Dangerous PHP Dead Code Enables RCE (CVSS 9.3, Vasion Print Virtual Appliance Host · Vasion Print Applicat…)
- [CVE-2025-43803](https://cve.now/CVE-2025-43803.md): Insecure direct object reference (IDOR) vulnerability in the Contacts Center widget in Liferay Portal 7.4.0 through 7.4.3.119, and older uns (CVSS 6.9, Liferay Portal · Liferay DXP +1)
- [CVE-2025-34202](https://cve.now/CVE-2025-34202.md): Vasion Print (formerly PrinterLogic) Insecure Access to Docker Instances WAN (CVSS 8.7, Vasion Print Virtual Appliance Host · Vasion Print Applicat…)
- [CVE-2025-34189](https://cve.now/CVE-2025-34189.md): Vasion Print (formerly PrinterLogic) Insecure Inter-Process Communication Allows Local Session Hijacking (CVSS 6.9, Vasion Print Virtual Appliance Host · Vasion Print Applicat…)
- [CVE-2025-34206](https://cve.now/CVE-2025-34206.md): Vasion Print (formerly PrinterLogic) Insecure Shared Storage Permissions (CVSS 9.3, Vasion Print Virtual Appliance Host · Vasion Print Applicat…)
- [CVE-2025-34199](https://cve.now/CVE-2025-34199.md): Vasion Print (formerly PrinterLogic) Insecure SSL Verification Allows Man-in-the-Middle Attacks (CVSS 9.3, Vasion Print Virtual Appliance Host · Vasion Print Applicat…)
- [CVE-2025-34193](https://cve.now/CVE-2025-34193.md): Vasion Print (formerly PrinterLogic) Insecure Windows Components Lack Modern Memory Protections and Use Outdated Runtimes (CVSS 7.1, Vasion Print Virtual Appliance Host · Vasion Print Applicat…)
- [CVE-2025-34201](https://cve.now/CVE-2025-34201.md): Vasion Print (formerly PrinterLogic) Lack of Network Segmentation Between Docker Instances (CVSS 8.5, Vasion Print Virtual Appliance Host · Vasion Print Applicat…)
- [CVE-2025-34188](https://cve.now/CVE-2025-34188.md): Vasion Print (formerly PrinterLogic) Local Log Disclosure of Cleartext Sessions (CVSS 8.4, Vasion Print Virtual Appliance Host · Vasion Print Applicat…)
- [CVE-2025-34194](https://cve.now/CVE-2025-34194.md): Vasion Print (formerly PrinterLogic) Local Privilege Escalation via Insecure Temporary File Handling (CVSS 8.5, Vasion Print Virtual Appliance Host · Vasion Print Applicat…)
- [CVE-2025-34200](https://cve.now/CVE-2025-34200.md): Vasion Print (formerly PrinterLogic) Network Account Password Stored in Cleartext (CVSS 8.6, Vasion Print Virtual Appliance Host · Vasion Print Applicat…)
- [CVE-2025-34204](https://cve.now/CVE-2025-34204.md): Vasion Print (formerly PrinterLogic) Processes Running as Root Inside Docker Instances (CVSS 8.7, Vasion Print Virtual Appliance Host · Vasion Print Applicat…)
- [CVE-2025-34198](https://cve.now/CVE-2025-34198.md): Vasion Print (formerly PrinterLogic) Shared / Hardcoded SSH Host Private Keys in Appliance Image (CVSS 9.3, Vasion Print Virtual Appliance Host · Vasion Print Applicat…)
- [CVE-2025-34197](https://cve.now/CVE-2025-34197.md): Vasion Print (formerly PrinterLogic) Undocumented Local Account with Hardcoded Password and Passwordless sudo (CVSS 8.6, Vasion Print Virtual Appliance Host · Vasion Print Applicat…)
- [CVE-2025-34192](https://cve.now/CVE-2025-34192.md): Vasion Print (formerly PrinterLogic) Usage of Outdated and Unsupported OpenSSL Version (CVSS 9.3, Vasion Print Virtual Appliance Host · Vasion Print Applicat…)
- [CVE-2025-34195](https://cve.now/CVE-2025-34195.md): Vasion Print (formerly PrinterLogic) Unquoted Path During Driver Installation Leads to Execution of C:\\Program.exe (CVSS 8.6, Vasion Print Virtual Appliance Host · Vasion Print Applicat…)
- [CVE-2025-34203](https://cve.now/CVE-2025-34203.md): Vasion Print (formerly PrinterLogic) Use of Outdated, End-Of-Life, and Vulnerable Third-Party Components (CVSS 9.3, Vasion Print Virtual Appliance Host · Vasion Print Applicat…)
- [CVE-2025-26515](https://cve.now/CVE-2025-26515.md): CVE-2025-26515 Server-Side Request Forgery Vulnerability in StorageGRID (formerly StorageGRID Webscale) (CVSS 7.5, NetApp StorageGRID)
- [CVE-2025-26514](https://cve.now/CVE-2025-26514.md): CVE-2025-26514 Reflected Cross-Site Scripting Vulnerability in StorageGRID (formerly StorageGRID Webscale) (CVSS 6.4, NetApp StorageGRID)
- [CVE-2025-10722](https://cve.now/CVE-2025-10722.md): SKTLab Mukbee App com.dw.android.mukbee AndroidManifest.xml improper export of android application components (CVSS 4.8, SKTLab Mukbee App)
- [CVE-2025-10721](https://cve.now/CVE-2025-10721.md): Webull Investing & Trading App AndroidManifest.xml improper export of android application components (CVSS 4.8, Webull Investing & Trading App)
- [CVE-2025-36248](https://cve.now/CVE-2025-36248.md): IBM Copy Services Manager cross-site scripting (CVSS 6.1, IBM Copy Services Manager)
- [CVE-2025-10718](https://cve.now/CVE-2025-10718.md): Ooma Office Business Phone App com.ooma.office2 improper export of android application components (CVSS 4.8, Ooma Office Business Phone App)
- [CVE-2025-59427](https://cve.now/CVE-2025-59427.md): Cloudflare vite plugin exposes secrets over the built-in dev server (CVSS 2.9, cloudflare workers-sdk · @cloudflare/vite-plugin)
- [CVE-2025-39866](https://cve.now/CVE-2025-39866.md): fs: writeback: fix use-after-free in \_\_mark\_inode\_dirty() (CVSS 7.8, Linux)
- [CVE-2025-39865](https://cve.now/CVE-2025-39865.md): tee: fix NULL pointer dereference in tee\_shm\_put (no CVSS, Linux)
- [CVE-2025-39864](https://cve.now/CVE-2025-39864.md): wifi: cfg80211: fix use-after-free in cmp\_bss() (CVSS 8.8, Linux)
- [CVE-2025-39863](https://cve.now/CVE-2025-39863.md): wifi: brcmfmac: fix use-after-free when rescheduling brcmf\_btcoex\_info work (CVSS 7.8, Linux)
- [CVE-2025-39862](https://cve.now/CVE-2025-39862.md): wifi: mt76: mt7915: fix list corruption after hardware restart (CVSS 8.8, Linux)
- [CVE-2025-39861](https://cve.now/CVE-2025-39861.md): Bluetooth: vhci: Prevent use-after-free by removing debugfs files early (CVSS 7.8, Linux)
- [CVE-2025-39860](https://cve.now/CVE-2025-39860.md): Bluetooth: Fix use-after-free in l2cap\_sock\_cleanup\_listen() (CVSS 8.0, Linux)
- [CVE-2025-39859](https://cve.now/CVE-2025-39859.md): ptp: ocp: fix use-after-free bugs causing by ptp\_ocp\_watchdog (CVSS 7.8, Linux)
- [CVE-2025-39858](https://cve.now/CVE-2025-39858.md): eth: mlx4: Fix IS\_ERR() vs NULL check bug in mlx4\_en\_create\_rx\_ring (CVSS 5.5, Linux)
- [CVE-2025-39857](https://cve.now/CVE-2025-39857.md): net/smc: fix one NULL pointer dereference in smc\_ib\_is\_sg\_need\_sync() (CVSS 7.5, Linux)
- [CVE-2025-39856](https://cve.now/CVE-2025-39856.md): net: ethernet: ti: am65-cpsw-nuss: Fix null pointer dereference for ndev (CVSS 5.5, Linux)
- [CVE-2025-39855](https://cve.now/CVE-2025-39855.md): ice: fix NULL access of tx-\>in\_use in ice\_ptp\_ts\_irq (CVSS 7.8, Linux)
- [CVE-2025-39854](https://cve.now/CVE-2025-39854.md): ice: fix NULL access of tx-\>in\_use in ice\_ll\_ts\_intr (CVSS 7.8, Linux)
- [CVE-2025-39853](https://cve.now/CVE-2025-39853.md): i40e: Fix potential invalid access when MAC list is empty (no CVSS, Linux)
- [CVE-2025-39852](https://cve.now/CVE-2025-39852.md): net/tcp: Fix socket memory leak in TCP-AO failure handling for IPv6 (CVSS 5.5, Linux)
- [CVE-2025-39851](https://cve.now/CVE-2025-39851.md): vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (CVSS 7.5, Linux)
- [CVE-2025-39850](https://cve.now/CVE-2025-39850.md): vxlan: Fix NPD in {arp,neigh}\_reduce() when using nexthop objects (CVSS 5.5, Linux)
- [CVE-2025-39849](https://cve.now/CVE-2025-39849.md): wifi: cfg80211: sme: cap SSID length in \_\_cfg80211\_connect\_result() (CVSS 8.8, Linux)
- [CVE-2025-39848](https://cve.now/CVE-2025-39848.md): ax25: properly unshare skbs in ax25\_kiss\_rcv() (CVSS 8.8, Linux)
- [CVE-2025-39847](https://cve.now/CVE-2025-39847.md): ppp: fix memory leak in pad\_compress\_skb (no CVSS, Linux)
- [CVE-2025-39846](https://cve.now/CVE-2025-39846.md): pcmcia: Fix a NULL pointer dereference in \_\_iodyn\_find\_io\_region() (no CVSS, Linux)
- [CVE-2025-39845](https://cve.now/CVE-2025-39845.md): x86/mm/64: define ARCH\_PAGE\_TABLE\_SYNC\_MASK and arch\_sync\_kernel\_mappings() (no CVSS, Linux)
- [CVE-2025-39844](https://cve.now/CVE-2025-39844.md): mm: move page table sync declarations to linux/pgtable.h (no CVSS, Linux)
- [CVE-2025-39843](https://cve.now/CVE-2025-39843.md): mm: slub: avoid wake up kswapd in set\_track\_prepare (no CVSS, Linux)
- [CVE-2025-39842](https://cve.now/CVE-2025-39842.md): ocfs2: prevent release journal inode after journal shutdown (no CVSS, Linux)
- [CVE-2025-39841](https://cve.now/CVE-2025-39841.md): scsi: lpfc: Fix buffer free/clear order in deferred receive path (CVSS 9.8, Linux)
- [CVE-2025-39840](https://cve.now/CVE-2025-39840.md): audit: fix out-of-bounds read in audit\_compare\_dname\_path() (CVSS 7.1, Linux)
- [CVE-2025-39839](https://cve.now/CVE-2025-39839.md): batman-adv: fix OOB read/write in network-coding decode (CVSS 8.8, Linux)
- [CVE-2025-39838](https://cve.now/CVE-2025-39838.md): cifs: prevent NULL pointer dereference in UTF16 conversion (no CVSS, Linux)
- [CVE-2025-39837](https://cve.now/CVE-2025-39837.md): platform/x86: asus-wmi: Fix racy registrations (CVSS 7.8, Linux)
- [CVE-2025-59344](https://cve.now/CVE-2025-59344.md): AliasVault Vulnerable to Server-Side Request Forgery via Favicon Extraction (CVSS 7.7, aliasvault)
- [CVE-2025-8664](https://cve.now/CVE-2025-8664.md): XSS in Saysis Computer Systems' StarCities (CVSS 6.3, Saysis Computer Systems Trade Ltd. StarCities E-Municipalit…)
- [CVE-2025-10717](https://cve.now/CVE-2025-10717.md): intsig CamScanner App com.intsig.camscanner AndroidManifest.xml improper export of android application components (CVSS 4.8, intsig CamScanner App)
- [CVE-2025-10716](https://cve.now/CVE-2025-10716.md): Creality Cloud App com.cxsw.sdprinter AndroidManifest.xml improper export of android application components (CVSS 4.8, Creality Cloud App)
- [CVE-2025-8532](https://cve.now/CVE-2025-8532.md): IDOR in Bimser's eBA Document and Workflow Management System (CVSS 6.4, Bimser Solution Software Trade eBA Document and Workflow Ma…)
- [CVE-2025-10715](https://cve.now/CVE-2025-10715.md): APEUni PTE Exam Practice App com.ape\_edication AndroidManifest.xml improper export of android application components (CVSS 4.8, APEUni PTE Exam Practice App)
- [CVE-2025-10712](https://cve.now/CVE-2025-10712.md): 07FLYCMS/07FLY-CMS/07FlyCRM login sql injection (CVSS 6.9, 07FLYCMS · 07FLY-CMS +1)
- [CVE-2025-58114](https://cve.now/CVE-2025-58114.md): Potential XSS in Extension:CognitiveProcessDesigner (CVSS 5.9, Hallo Welt! BlueSpice)
- [CVE-2025-57880](https://cve.now/CVE-2025-57880.md): Potential XSS in Extension:BlueSpiceWhoIsOnline (CVSS 5.9, Hallo Welt! BlueSpice)
- [CVE-2025-48007](https://cve.now/CVE-2025-48007.md): Potential XSS in Extension:BlueSpiceAvatars (CVSS 5.9, Hallo Welt! BlueSpice)
- [CVE-2025-46703](https://cve.now/CVE-2025-46703.md): Potential XSS in Extension:AtMentions (CVSS 5.9, Hallo Welt! BlueSpice)
- [CVE-2025-10711](https://cve.now/CVE-2025-10711.md): 07FLYCMS/07FLY-CMS/07FlyCRM Login cross site scripting (CVSS 5.3, 07FLYCMS · 07FLY-CMS +1)
- [CVE-2025-10710](https://cve.now/CVE-2025-10710.md): 07FLYCMS/07FLY-CMS/07FlyCRM index.php cross site scripting (CVSS 5.3, 07FLYCMS · 07FLY-CMS +1)
- [CVE-2025-7665](https://cve.now/CVE-2025-7665.md): Miniorange OTP Verification with Firebase 3.1.0 - 3.6.2 - Unauthenticated Privilege Escalation (CVSS 8.1, cyberlord92 Miniorange OTP Verification with Firebase)
- [CVE-2025-10709](https://cve.now/CVE-2025-10709.md): Four-Faith Water Conservancy Informatization Platform historyDownload.do;otheruserLogin.do;getfile path traversal (CVSS 6.9, Four-Faith Water Conservancy Informatization Platform)
- [CVE-2025-10708](https://cve.now/CVE-2025-10708.md): Four-Faith Water Conservancy Informatization Platform historyDownload.do;usrlogout.do path traversal (CVSS 6.9, Four-Faith Water Conservancy Informatization Platform)
- [CVE-2025-10707](https://cve.now/CVE-2025-10707.md): JeecgBoot sendMsg improper authorization (CVSS 5.3, JeecgBoot)
- [CVE-2025-9969](https://cve.now/CVE-2025-9969.md): Reflected XSS in Vizly Web Design's Real Estate Packages (CVSS 7.1, Vizly Web Design Real Estate Packages)
- [CVE-2025-10468](https://cve.now/CVE-2025-10468.md): Path Traversal in Beyaz Computer's CityPLus (CVSS 7.5, Beyaz Computer CityPlus)
- [CVE-2025-10719](https://cve.now/CVE-2025-10719.md): WisdomGarden｜Tronclass - Insecure Direct Object Reference (CVSS 4.3, WisdomGarden Tronclass)
- [CVE-2025-10630](https://cve.now/CVE-2025-10630.md): Regex DoS in Grafana Zabbix Plugin (CVSS 4.3, grafana-zabbix-plugin · github.com/alexanderzobnin/grafana-…)
- [CVE-2025-8531](https://cve.now/CVE-2025-8531.md): Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series Q03UDVCPU, Q04UDVCPU, Q (CVSS 6.8, Mitsubishi Electric MELSEC-Q Series Q03UDVCPU · Mitsubis… +7)
- [CVE-2025-10647](https://cve.now/CVE-2025-10647.md): Embed PDF for WPForms \<= 1.1.5 - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 8.8, salzano Embed PDF for WPForms)
- [CVE-2025-9905](https://cve.now/CVE-2025-9905.md): Arbitary Code execution in Keras load\_model() (CVSS 7.3, Keras-team Keras · keras)
- [CVE-2025-9906](https://cve.now/CVE-2025-9906.md): Arbitrary Code execution in Keras Safe Mode (CVSS 8.6, Keras-team Keras · keras)
- [CVE-2025-7702](https://cve.now/CVE-2025-7702.md): Open Redirect in PUSULA's Manageable Email Sending System (CVSS 4.7, Pusula Communication Information Internet Industry and Trad…)
- [CVE-2025-5948](https://cve.now/CVE-2025-5948.md): Service Finder Bookings \<= 6.0 - Unauthenticated Privilege Escalation via claim\_business (CVSS 9.8, aonetheme Service Finder Bookings)
- [CVE-2025-10456](https://cve.now/CVE-2025-10456.md): Bluetooth: Semi-Arbitrary ability to make the BLE Target send disconnection requests (CVSS 7.1, zephyrproject-rtos Zephyr)
- [CVE-2025-10458](https://cve.now/CVE-2025-10458.md): Bluetooth: le\_conn\_rsp does not sanitize CID, MTU, MPS values (CVSS 7.6, zephyrproject-rtos Zephyr)
- [CVE-2025-7403](https://cve.now/CVE-2025-7403.md): Bluetooth: bt\_conn\_tx\_processor unsafe handling (CVSS 7.6, zephyrproject-rtos Zephyr)
- [CVE-2025-10457](https://cve.now/CVE-2025-10457.md): Bluetooth: Out-Of-Context le\_conn\_rsp Handling (CVSS 4.3, zephyrproject-rtos Zephyr)
- [CVE-2025-5955](https://cve.now/CVE-2025-5955.md): Service Finder SMS System \<= 2.0.0 - Authentication Bypass (CVSS 8.1, aonetheme Service Finder SMS System)
- [CVE-2025-10146](https://cve.now/CVE-2025-10146.md): Download Manager \<= 3.3.23 - Reflected Cross-Site Scripting via \`user\_ids\` Parameter (CVSS 6.1, codename065 Download Manager)
- [CVE-2025-8487](https://cve.now/CVE-2025-8487.md): Kubio AI Page Builder \<= 2.6.3 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation (CVSS 5.4, extendthemes Kubio AI Page Builder)
- [CVE-2025-10690](https://cve.now/CVE-2025-10690.md): Goza - Nonprofit Charity WordPress Theme \<= 3.2.2 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation (CVSS 9.8, Bearsthemes Goza - Nonprofit Charity WordPress Theme)
- [CVE-2025-7937](https://cve.now/CVE-2025-7937.md): Supermicro BMC firmware update validation bypass (CVSS 7.2, SMCI MBD-X12STW)
- [CVE-2025-6198](https://cve.now/CVE-2025-6198.md): Supermicro BMC firmware update validation bypass (CVSS 7.2, SMCI X13SEM-F)
- [CVE-2025-48703](https://cve.now/CVE-2025-48703.md): CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1205 allows unauthenticated remote code execution via shell metacharacters in t (CVSS 9.0, KEV, centos-webpanel CentOS Web Panel)
- [CVE-2025-52159](https://cve.now/CVE-2025-52159.md): Hardcoded credentials in default configuration of PPress 0.0.9. (CVSS 8.8)
- [CVE-2025-54761](https://cve.now/CVE-2025-54761.md): An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via crafted session cookie. (CVSS 8.0)
- [CVE-2025-54815](https://cve.now/CVE-2025-54815.md): Server-side template injection (SSTI) vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes. (CVSS 8.8)
- [CVE-2025-55910](https://cve.now/CVE-2025-55910.md): CMSEasy v7.7.8.0 and before is vulnerable to Arbitrary file deletion in database\_admin.php. (CVSS 6.3)
- [CVE-2025-56762](https://cve.now/CVE-2025-56762.md): Paracrawl KeOPs v2 is vulnerable to Cross Site Scripting (XSS) in error.php. (CVSS 6.1)
- [CVE-2025-56869](https://cve.now/CVE-2025-56869.md): Directory traversal vulnerability in Sync In server thru 1.1.1 allowing authenticated attackers to gain read and write access to the system (CVSS 5.3)
- [CVE-2025-57296](https://cve.now/CVE-2025-57296.md): Tenda AC6 router firmware 15.03.05.19 contains a command injection vulnerability in the formSetIptv function, which processes requests to th (CVSS 6.5)
- [CVE-2025-57396](https://cve.now/CVE-2025-57396.md): Tandoor Recipes 2.0.0-alpha-1, fixed in 2.0.0-alpha-2, is vulnerable to privilege escalation. (CVSS 6.5)
- [CVE-2025-57528](https://cve.now/CVE-2025-57528.md): An issue was discovered in Tenda AC6 US\_AC6V1.0BR\_V15.03.05.16\_multi\_TD01 allowing attackers to cause a denial of service via the funcname, (CVSS 7.7)
- [CVE-2025-57644](https://cve.now/CVE-2025-57644.md): Accela Automation Platform 22.2.3.0.230103 contains multiple vulnerabilities in the Test Script feature. (CVSS 9.1)
- [CVE-2025-59689](https://cve.now/CVE-2025-59689.md): Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment. (CVSS 6.1, KEV, Libraesva Email Security Gateway)
- [CVE-2025-59712](https://cve.now/CVE-2025-59712.md): Snipe-IT before 8.1.18 allows XSS. (CVSS 6.4, snipeitapp Snipe-IT · snipe/snipe-it)
- [CVE-2025-59713](https://cve.now/CVE-2025-59713.md): Snipe-IT before 8.1.18 allows unsafe deserialization. (CVSS 6.8, snipeitapp Snipe-IT · snipe/snipe-it)
- [CVE-2025-59714](https://cve.now/CVE-2025-59714.md): In Internet2 Grouper 5.17.1 before 5.20.5, group admins who are not Grouper sysadmins can configure loader jobs. (CVSS 6.5, Internet2 Grouper)
- [CVE-2025-59715](https://cve.now/CVE-2025-59715.md): SMSEagle before 6.11 allows reflected XSS via a username or contact phone number. (CVSS 4.8, SMSEagle)
- [CVE-2025-59717](https://cve.now/CVE-2025-59717.md): In the @digitalocean/do-markdownit package through 1.16.1 (in npm), the callout and fence\_environment plugins perform .includes substring ma (CVSS 5.4, @digitalocean/do-markdownit)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-09-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.