CVEs published September 29 to October 5, 2025
940 CVEs were published Sep 29 to Oct 5, 2025, 74 of them critical. CISA added 10 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 940
- Critical
- 74
- Added to CISA KEV
- 10
- Busiest day
- Wed, Oct 1 (243)
- Quietest day
- Sun, Oct 5 (39)
- September 29, 2025119 CVEs · 21 critical
- September 30, 2025103 CVEs · 13 critical
- October 1, 2025243 CVEs · 5 critical
- October 2, 2025120 CVEs · 17 critical
- October 3, 2025157 CVEs · 10 critical
- October 4, 2025159 CVEs · 7 critical
- October 5, 202539 CVEs · 1 critical
Added to CISA KEV 10
- CVE-2021-21311SSRF in adminervrana adminer · vrana/adminer
- CVE-2025-10035Deserialization Vulnerability in GoAnywhere MFT's License ServletFortra GoAnywhere MFT
- CVE-2025-20352A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the fCisco IOS
- CVE-2025-32463Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the…Sudo project Sudo
- CVE-2025-59689Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment.Libraesva Email Security Gateway
- CVE-2014-6278GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote att
- CVE-2015-7755Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before
- CVE-2017-1000353Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remote code execution.org.jenkins-ci.main:jenkins-core
- CVE-2025-21043Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.Samsung Mobile Devices
- CVE-2025-4008Arbitrary Command Injection in Smartbedded MeteoBridgeSmartbedded MeteoBridge