# CVEs published 2025-09-25

108 CVEs were published on September 25, 2025: 9 critical, 39 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2025-10980](https://cve.now/CVE-2025-10980.md): JeecgBoot exportXls improper authorization (CVSS 5.3, JeecgBoot)
- [CVE-2025-10979](https://cve.now/CVE-2025-10979.md): JeecgBoot exportXls improper authorization (CVSS 5.3, JeecgBoot)
- [CVE-2025-10978](https://cve.now/CVE-2025-10978.md): JeecgBoot Filter exportXls improper authorization (CVSS 5.3, JeecgBoot)
- [CVE-2025-10977](https://cve.now/CVE-2025-10977.md): JeecgBoot deleteBatch improper authorization (CVSS 2.3, JeecgBoot)
- [CVE-2025-10976](https://cve.now/CVE-2025-10976.md): JeecgBoot getDepartUserList improper authorization (CVSS 2.3, JeecgBoot)
- [CVE-2025-10975](https://cve.now/CVE-2025-10975.md): GuanxingLu vlarl ZeroMQ reasoning\_server.py run\_reasoning\_server deserialization (CVSS 5.3, GuanxingLu vlarl)
- [CVE-2025-10974](https://cve.now/CVE-2025-10974.md): giantspatula SewKinect Endpoint calculate pickle.loads deserialization (CVSS 5.3, giantspatula SewKinect)
- [CVE-2025-26482](https://cve.now/CVE-2025-26482.md): Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability. (CVSS 4.9, Dell PowerEdge R770 · Dell PowerEdge R670 +110)
- [CVE-2025-10973](https://cve.now/CVE-2025-10973.md): JackieDYH Resume-management-system show.php sql injection (CVSS 6.9, JackieDYH Resume-management-system)
- [CVE-2025-11005](https://cve.now/CVE-2025-11005.md): TOTOLINK X6000R Unauthenticated Command Injection Vulnerability (CVSS 9.3, TOTOLINK X6000R)
- [CVE-2025-43816](https://cve.now/CVE-2025-43816.md): A memory leak in the headless API for StructuredContents in Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Life (CVSS 6.9, Liferay Portal · Liferay DXP +1)
- [CVE-2025-10967](https://cve.now/CVE-2025-10967.md): MuFen-mker PHP-Usermm chkuser.php sql injection (CVSS 6.9, MuFen-mker PHP-Usermm)
- [CVE-2025-10965](https://cve.now/CVE-2025-10965.md): LazyAGI LazyLLM server.py lazyllm\_call deserialization (CVSS 5.3, LazyAGI LazyLLM)
- [CVE-2025-43993](https://cve.now/CVE-2025-43993.md): Dell Wireless 5932e and Qualcomm Snapdragon X62 Firmware and GNSS/GPS Driver, versions prior to 3.2.0.22 contain an Unquoted Search Path or (CVSS 7.8, Dell Wireless)
- [CVE-2025-10964](https://cve.now/CVE-2025-10964.md): Wavlink NU516U1 firewall.cgi sub\_401B30 command injection (CVSS 5.3, Wavlink NU516U1)
- [CVE-2025-59817](https://cve.now/CVE-2025-59817.md): Authenticated Remote Code Execution in zForm\_auto\_config (CVSS 8.4, Zenitel TCIS-3+)
- [CVE-2025-59816](https://cve.now/CVE-2025-59816.md): Authenticated Union based SQL-injection in the search input field (CVSS 7.3, Zenitel ICX500 · Zenitel ICX510)
- [CVE-2025-59815](https://cve.now/CVE-2025-59815.md): Authenticated Remote Code Execution in the Billing Administration portal (CVSS 8.4, Zenitel ICX500 · Zenitel ICX510)
- [CVE-2025-59814](https://cve.now/CVE-2025-59814.md): Unauthenticated SQL-injection in password field (CVSS 8.8, Zenitel ICX500 · Zenitel ICX510)
- [CVE-2025-10963](https://cve.now/CVE-2025-10963.md): Wavlink NU516U1 firewall.cgi sub\_4016F0 command injection (CVSS 5.3, Wavlink NU516U1)
- [CVE-2025-10962](https://cve.now/CVE-2025-10962.md): Wavlink NU516U1 SetName wireless.cgi sub\_403198 command injection (CVSS 5.3, Wavlink NU516U1)
- [CVE-2025-10961](https://cve.now/CVE-2025-10961.md): Wavlink NU516U1 Delete\_Mac\_list wireless.cgi sub\_4030C0 command injection (CVSS 5.1, Wavlink NU516U1)
- [CVE-2025-10960](https://cve.now/CVE-2025-10960.md): Wavlink NU516U1 DeleteMac wireless.cgi sub\_402D1C command injection (CVSS 5.3, Wavlink NU516U1)
- [CVE-2025-10959](https://cve.now/CVE-2025-10959.md): Wavlink NU516U1 firewall.cgi sub\_401778 command injection (CVSS 5.3, Wavlink NU516U1)
- [CVE-2025-10958](https://cve.now/CVE-2025-10958.md): Wavlink NU516U1 AddMac wireless.cgi sub\_403010 command injection (CVSS 5.3, Wavlink NU516U1)
- [CVE-2025-34227](https://cve.now/CVE-2025-34227.md): Nagios XI \< 2026R1 Configuration Wizard Authenticated Command Injection (CVSS 8.6, Nagios XI)
- [CVE-2025-10880](https://cve.now/CVE-2025-10880.md): Insufficiently Protected Credentials in Dingtian DT-R002 (CVSS 8.7, Dingtian DT-R002)
- [CVE-2025-10879](https://cve.now/CVE-2025-10879.md): Insufficiently Protected Credentials in Dingtian DT-R002 (CVSS 8.7, Dingtian DT-R002)
- [CVE-2025-20363](https://cve.now/CVE-2025-20363.md): A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defens (CVSS 9.0, Cisco IOS · Cisco Adaptive Security Appliance (ASA) Soft… +1)
- [CVE-2025-20362](https://cve.now/CVE-2025-20362.md): Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FT (CVSS 6.5, KEV, Cisco Secure Firewall Adaptive Security Appliance (ASA) Sof…)
- [CVE-2025-20333](https://cve.now/CVE-2025-20333.md): A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat D (CVSS 9.9, KEV, Cisco Secure Firewall Adaptive Security Appliance (ASA) Sof…)
- [CVE-2025-10953](https://cve.now/CVE-2025-10953.md): UTT 1200GW/1250GW formApMail buffer overflow (CVSS 8.7, UTT 1200GW · UTT 1250GW)
- [CVE-2025-60019](https://cve.now/CVE-2025-60019.md): Glib-networking: uninitialized memory dereferences on glib-networking through glib-networking/tls/openssl/gtlsbio.c via g\_tls\_bio\_new\_from\_iostream() and g\_tls\_bio\_new\_from\_datagram\_based() (CVSS 3.7, glib-networking · Red Hat Enterprise Linux)
- [CVE-2025-60018](https://cve.now/CVE-2025-60018.md): Glib-networking: out of bound reads on glib-networking through tls/openssl/gtlscertificate-openssl.c via "g\_tls\_certificate\_openssl\_get\_property()" (CVSS 4.8, glib-networking · Red Hat Enterprise Linux)
- [CVE-2025-10952](https://cve.now/CVE-2025-10952.md): geyang ml-logger File server.py stream\_handler information disclosure (CVSS 6.9, geyang ml-logger · ml-logger)
- [CVE-2025-43943](https://cve.now/CVE-2025-43943.md): Dell Cloud Disaster Recovery, version(s) prior to 19.20, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('O (CVSS 6.7, Dell Cloud Disaster Recovery)
- [CVE-2025-26333](https://cve.now/CVE-2025-26333.md): Dell BSAFE Crypto-J generates an error message that includes sensitive information about its environment and associated data. (CVSS 5.9, Dell BSAFE Crypto-J)
- [CVE-2025-59841](https://cve.now/CVE-2025-59841.md): FlagForgeCTF's Improper Session Handling Allows Access After Logout (CVSS 9.8, FlagForgeCTF flagForge)
- [CVE-2025-10911](https://cve.now/CVE-2025-10911.md): Libxslt: use-after-free with key data stored cross-rvt (CVSS 5.5, libxslt · Red Hat Enterprise Linux +8)
- [CVE-2025-33116](https://cve.now/CVE-2025-33116.md): IBM Watson Studio on Cloud Pak for Data cross-site scripting (CVSS 4.4, IBM Watson Studio on Cloud Pak for Data)
- [CVE-2024-48014](https://cve.now/CVE-2024-48014.md): Dell BSAFE Micro Edition Suite, versions prior to 5.0.2.3 contain an Out-of-bounds Write vulnerability. (CVSS 7.5, Dell BSAFE Micro Edition Suite)
- [CVE-2025-10951](https://cve.now/CVE-2025-10951.md): geyang ml-logger server.py log\_handler path traversal (CVSS 6.9, geyang ml-logger · ml-logger)
- [CVE-2025-36601](https://cve.now/CVE-2025-36601.md): Dell PowerScale OneFS, versions 9.5.0.0 through 9.11.0.0, contains an exposure of sensitive information to an unauthorized actor vulnerabili (CVSS 4.0, Dell PowerScale OneFS)
- [CVE-2025-40838](https://cve.now/CVE-2025-40838.md): Ericsson Indoor Connect 8855 - Insufficiently Protected Credentials Vulnerability (CVSS 5.1, Ericsson Indoor Connect)
- [CVE-2025-40837](https://cve.now/CVE-2025-40837.md): Ericsson Indoor Connect 8855 - Missing Authorization Vulnerability (CVSS 8.7, Ericsson Indoor Connect)
- [CVE-2025-59838](https://cve.now/CVE-2025-59838.md): Monkeytype Vulnerable to Self-XSS on loading saved custom text (CVSS 2.4, monkeytypegame monkeytype)
- [CVE-2025-40836](https://cve.now/CVE-2025-40836.md): Ericsson Indoor Connect 8855 - Improper Input Validation Vulnerability (CVSS 8.7, Ericsson Indoor Connect)
- [CVE-2020-36851](https://cve.now/CVE-2020-36851.md): Rob--W cors-anywhere Misconfigured CORS Proxy Allows SSRF (CVSS 9.5, Rob--W / cors-anywhere · cors-anywhere)
- [CVE-2025-59832](https://cve.now/CVE-2025-59832.md): Horrila Stored XSS Vulnerability via Ticket Comment section (CVSS 9.9, horilla-opensource horilla)
- [CVE-2025-27262](https://cve.now/CVE-2025-27262.md): Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an OS Command Vulnerability (CVSS 8.5, Ericsson Indoor Connect)
- [CVE-2025-36857](https://cve.now/CVE-2025-36857.md): Rapid7 Appspider Broken Access Control Vulnerability (CVSS 3.3, Rapid7 Appspider Pro)
- [CVE-2025-59830](https://cve.now/CVE-2025-59830.md): Rack QueryParser has an unsafe default allowing params\_limit bypass via semicolon-separated parameters (CVSS 7.5, rack)
- [CVE-2025-10542](https://cve.now/CVE-2025-10542.md): Insecure Default Admin Credentials Enable Full Administrative Access in iMonitor EAM (CVSS 9.8, iMonitor Software iMonitor EAM)
- [CVE-2025-10950](https://cve.now/CVE-2025-10950.md): geyang ml-logger Ping server.py log\_handler deserialization (CVSS 5.3, geyang ml-logger · ml-logger)
- [CVE-2025-10949](https://cve.now/CVE-2025-10949.md): Changsha Developer Technology iView Editor Markdown cross site scripting (CVSS 4.8, Changsha Developer Technology iView Editor)
- [CVE-2025-10541](https://cve.now/CVE-2025-10541.md): Local Privilege Escalation via Insecure Update Mechanism in iMonitor EAM (CVSS 7.8, iMonitor Software iMonitor EAM)
- [CVE-2025-59823](https://cve.now/CVE-2025-59823.md): Gardener providers vulnerable to code injection when Terraformer is used for infrastructure provisioning (CVSS 9.9, gardener-extension-provider-aws · github.com/gardener/ga… +3)
- [CVE-2025-10540](https://cve.now/CVE-2025-10540.md): Unencrypted and Unauthenticated Communication Allows Data Exposure and Manipulation in iMonitor EAM (CVSS 6.5, iMonitor Software iMonitor EAM)
- [CVE-2025-10948](https://cve.now/CVE-2025-10948.md): MikroTik RouterOS libjson.so print parse\_json\_element buffer overflow (CVSS 8.7, MikroTik RouterOS)
- [CVE-2025-59426](https://cve.now/CVE-2025-59426.md): lobe-chat has an Open Redirect (CVSS 4.3, lobehub lobe-chat · @lobehub/chat)
- [CVE-2025-59839](https://cve.now/CVE-2025-59839.md): Star Citizen EmbedVideo Extension Stored XSS through wikitext caused by usage of non-reserved data attributes (CVSS 8.6, StarCitizenWiki mediawiki-extensions-EmbedVideo · starcitiz…)
- [CVE-2025-27261](https://cve.now/CVE-2025-27261.md): Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an SQL Command Vulnerability (CVSS 8.7, Ericsson Indoor Connect)
- [CVE-2025-59834](https://cve.now/CVE-2025-59834.md): Command Injection in adb-mcp MCP Server (CVSS 9.8, srmorete adb-mcp · adb-mcp)
- [CVE-2025-59831](https://cve.now/CVE-2025-59831.md): \`git-comiters\` Command Injection vulnerability (CVSS 8.7, snowyu git-commiters.js · git-commiters)
- [CVE-2025-10467](https://cve.now/CVE-2025-10467.md): Stored XSS in Proliz Software's OBS (CVSS 8.9, PROLIZ Computer Software Hardware Service Trade Ltd. OBS)
- [CVE-2025-59422](https://cve.now/CVE-2025-59422.md): Dify Has Broken Access Control on Log Message Endpoint Allows Reading of Chats of Others (CVSS 6.0, langgenius dify)
- [CVE-2025-5494](https://cve.now/CVE-2025-5494.md): Privilege Escalation (CVSS 3.9, Zohocorp Endpoint Central)
- [CVE-2025-10947](https://cve.now/CVE-2025-10947.md): Sistemas Pleno Gestão de Locação CPF validarCpf authorization (CVSS 6.9, Sistemas Pleno Gestão de Locação)
- [CVE-2025-10946](https://cve.now/CVE-2025-10946.md): nuz007 smsboom dy.php cross site scripting (CVSS 5.1, nuz007 smsboom)
- [CVE-2025-10449](https://cve.now/CVE-2025-10449.md): Path Traversal in Saysis Computer Systems' Saysis Web Portal (CVSS 8.6, Saysis Computer Systems Trade Ltd. Saysis Web Portal)
- [CVE-2025-10945](https://cve.now/CVE-2025-10945.md): nuz007 smsboom d.php cross site scripting (CVSS 5.1, nuz007 smsboom)
- [CVE-2025-10944](https://cve.now/CVE-2025-10944.md): yi-ge get-header-ip ip.php cross site scripting (CVSS 5.1, yi-ge get-header-ip)
- [CVE-2025-10943](https://cve.now/CVE-2025-10943.md): MikeCen WeChat-Face-Recognition wx.php valid cross site scripting (CVSS 5.1, MikeCen WeChat-Face-Recognition)
- [CVE-2025-10957](https://cve.now/CVE-2025-10957.md): Unrestricted FTP Access Vulnerability in Syrotech Router (CVSS 8.7, Syrotech Networks Syrotech SY-GPON-2010-WADONT)
- [CVE-2025-40698](https://cve.now/CVE-2025-40698.md): SQL injection vulnerability in Prevengos (CVSS 8.7, Nedatec Consulting Prevengos)
- [CVE-2025-10942](https://cve.now/CVE-2025-10942.md): H3C Magic B3 aspForm EditMacList buffer overflow (CVSS 8.7, H3C Magic B3)
- [CVE-2025-10941](https://cve.now/CVE-2025-10941.md): Topaz SERVCore Teller Installer SERVCoreTeller\_2.0.40D.msi permission (CVSS 8.5, Topaz SERVCore Teller)
- [CVE-2025-10940](https://cve.now/CVE-2025-10940.md): Total.js CMS Layout admin layouts\_save cross site scripting (CVSS 4.8, Total.js CMS)
- [CVE-2025-10438](https://cve.now/CVE-2025-10438.md): Path Traversal in Yordam BT's Yordam Katalog (CVSS 8.6, Yordam Information Technology Consulting Education and Elec…)
- [CVE-2025-21056](https://cve.now/CVE-2025-21056.md): Improper input validation in Retail Mode prior to version 5.59.4 allows self attackers to execute privileged commands on their own devices. (CVSS 6.6, Samsung Mobile Retail Mode)
- [CVE-2025-26278](https://cve.now/CVE-2025-26278.md): A prototype pollution in the lib.set function of dref v0.1.2 allows attackers to cause a Denial of Service (DoS) via supplying a crafted pay (CVSS 7.5, dref)
- [CVE-2025-29155](https://cve.now/CVE-2025-29155.md): An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via the DELETE endpoint (CVSS 6.5)
- [CVE-2025-29156](https://cve.now/CVE-2025-29156.md): Cross Site Scripting vulnerability in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via a crafted script to the /api/v (CVSS 6.1)
- [CVE-2025-29157](https://cve.now/CVE-2025-29157.md): An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via accessing a non-existent endpoint/cart, the server retur (CVSS 6.5)
- [CVE-2025-46148](https://cve.now/CVE-2025-46148.md): In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results. (CVSS 5.3, torch)
- [CVE-2025-46149](https://cve.now/CVE-2025-46149.md): In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error. (CVSS 5.3, torch)
- [CVE-2025-46150](https://cve.now/CVE-2025-46150.md): In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results. (CVSS 5.3, torch)
- [CVE-2025-46152](https://cve.now/CVE-2025-46152.md): In PyTorch before 2.7.0, bitwise\_right\_shift produces incorrect output for certain out-of-bounds values of the "other" argument. (CVSS 5.3, torch)
- [CVE-2025-46153](https://cve.now/CVE-2025-46153.md): PyTorch before 3.7.0 has a bernoulli\_p decompose function in decompositions.py even though it lacks full consistency with the eager CPU impl (CVSS 5.3, torch)
- [CVE-2025-48707](https://cve.now/CVE-2025-48707.md): An issue was discovered in Stormshield Network Security (SNS) before 5.0.1. (CVSS 7.5)
- [CVE-2025-55551](https://cve.now/CVE-2025-55551.md): An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice oper (CVSS 7.5, torch)
- [CVE-2025-55552](https://cve.now/CVE-2025-55552.md): pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randn\_like are used together. (CVSS 5.3, torch)
- [CVE-2025-55553](https://cve.now/CVE-2025-55553.md): A syntax error in the component proxy\_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS). (CVSS 7.5, torch)
- [CVE-2025-55554](https://cve.now/CVE-2025-55554.md): pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan\_to\_num-.long(). (CVSS 5.3, torch)
- [CVE-2025-55556](https://cve.now/CVE-2025-55556.md): TensorFlow v2.18.0 was discovered to output random results when compiling Embedding, leading to unexpected behavior in the application. (CVSS 6.5)
- [CVE-2025-55557](https://cve.now/CVE-2025-55557.md): A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of Serv (CVSS 7.5, torch)
- [CVE-2025-55558](https://cve.now/CVE-2025-55558.md): A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tenso (CVSS 7.5, torch)
- [CVE-2025-55559](https://cve.now/CVE-2025-55559.md): An issue was discovered TensorFlow v2.18.0. (CVSS 7.5)
- [CVE-2025-55560](https://cve.now/CVE-2025-55560.md): An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to\_sparse() and torch.Tensor. (CVSS 7.5, torch)
- [CVE-2025-56769](https://cve.now/CVE-2025-56769.md): An issue was discovered in chinabugotech hutool before 5.8.4 allowing attackers to execute arbitrary expressions that lead to arbitrary meth (CVSS 6.5, cn.hutool:hutool-extra)
- [CVE-2025-57317](https://cve.now/CVE-2025-57317.md): apidoc-core is the core parser library to generate apidoc result following the apidoc-spec. (CVSS 7.5, apidoc-core)
- [CVE-2025-57446](https://cve.now/CVE-2025-57446.md): An issue in O-RAN Near Realtime RIC ric-plt-submgr in the J-Release environment, allows remote attackers to cause a denial of service (DoS) (CVSS 7.5)
- [CVE-2025-57623](https://cve.now/CVE-2025-57623.md): A NULL pointer dereference in TOTOLINK N600R firmware v4.3.0cu.7866\_B2022506 allows attackers to cause a Denial of Service. (CVSS 5.3)
- [CVE-2025-57632](https://cve.now/CVE-2025-57632.md): libsmb2 6.2+ is vulnerable to Buffer Overflow. (CVSS 7.5)
- [CVE-2025-59402](https://cve.now/CVE-2025-59402.md): Flock Safety Bravo Edge AI Compute Device BRAVO\_00.00\_local\_20241017 accepts the default Thundercomm TurboX 6490 Firehose loader in EDL/QDL (CVSS 5.4)
- [CVE-2025-59404](https://cve.now/CVE-2025-59404.md): Flock Safety Bravo Edge AI Compute Device BRAVO\_00.00\_local\_20241017 ships with its bootloader unlocked. (CVSS 7.5)
- [CVE-2025-59408](https://cve.now/CVE-2025-59408.md): Flock Safety Bravo Edge AI Compute Device BRAVO\_00.00\_local\_20241017 ships with Secure Boot disabled. (CVSS 7.3)
- [CVE-2025-60249](https://cve.now/CVE-2025-60249.md): vulnerability-lookup 2.16.0 allows XSS in bundle.py, comment.py, and user.py, by a user on a vulnerability-lookup instance who can add bundl (CVSS 6.4, CIRCL vulnerability-lookup)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-09-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.