Week 40, 2025

29 September to 5 October 2025. The CVEs published in the week, the most severe of them, and what CISA added to its catalog of known exploited vulnerabilities.

CVEs published: 940
Critical: 74
High: 308
Added to KEV: 10

Critical 74High 308Medium 539Low 19Not scored 0All 940 in the list

Added to KEVAttackers use these now; patch them first

CVE-2017-1000353
Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remote code execution. An unauthenticated remote code…
Product not named
ExploitedCritical9.8
CVE-2015-7755
Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before 6.3.0r15b,…
Product not named
ExploitedCritical9.8
CVE-2025-21043
Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.
Samsung Mobile · Samsung Mobile Devices
ExploitedHigh8.8
CVE-2014-6278
GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute…
Product not named
ExploitedHigh8.8
CVE-2025-4008
Arbitrary Command Injection in Smartbedded MeteoBridge
Smartbedded · MeteoBridge
ExploitedHigh8.7
CVE-2025-10035
Deserialization Vulnerability in GoAnywhere MFT's License Servlet
Fortra · GoAnywhere MFT
ExploitedCritical10.0
CVE-2025-32463
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
Sudo project · Sudo
ExploitedCritical9.3
CVE-2025-20352
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An…
Cisco · IOS
ExploitedHigh7.7
CVE-2021-21311
SSRF in adminer
vrana · adminer
ExploitedHigh7.2
CVE-2025-59689
Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment. For ESG 5.0 a fix has been released in 5.0.31. For…
Libraesva · Email Security Gateway
ExploitedMedium6.1

Most severe new CVEsBy CVSS score

CVE-2025-49844
Redis Lua Use-After-Free may lead to remote code execution
redis · redis
Critical10.0
CVE-2025-34221
Vasion Print (formerly PrinterLogic)
Vasion · Print Virtual Appliance Host
Critical10.0
CVE-2025-34223
Vasion Print (formerly PrinterLogic) Insecure Installation Credentials
Vasion · Print Virtual Appliance Host
Critical10.0
CVE-2025-34218
Vasion Print (formerly PrinterLogic) Exposed Internal Docker Instance
Vasion · Print Virtual Appliance Host
Critical10.0
CVE-2025-34224
Vasion Print (formerly PrinterLogic) Unauthenticated Device Modification
Vasion · Print Virtual Appliance Host
Critical10.0
CVE-2025-34216
Vasion Print (formerly PrinterLogic) RCE and Password Leaks via API
Vasion · Print Virtual Appliance Host
Critical10.0
CVE-2025-34217
Vasion Print (formerly PrinterLogic) Undocumented Hardcoded SSH Key
Vasion · Print Virtual Appliance Host
Critical10.0
CVE-2025-7065
Remote Code Execution via Unrestricted File Upload in PAD CMS
Polska Akademia Dostępności · PAD CMS
Critical10.0
CVE-2025-7063
Remote Code Execution via Unrestricted File Upload in PAD CMS
Polska Akademia Dostępności · PAD CMS
Critical10.0
CVE-2025-8120
Remote Code Execution via Unrestricted File Upload in PAD CMS
Polska Akademia Dostępności · PAD CMS
Critical10.0

Week 40, 2025

Added to KEVAttackers use these now; patch them first

Most severe new CVEsBy CVSS score

Vendors with the most CVEs

Most common weaknesses