erroneo.us
Search all guides⌘K

Digest · Monday

Security digest: September 29, 2025

5 known exploited (cisa kev) additions and 1 critical advisory.

All digests · RSS · Markdown

Take stock

  • Do you run any of these? Libraesva Email Security Gateway, Sudo Sudo, Cisco IOS and IOS XE, Fortra GoAnywhere MFT, Adminer Adminer. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2025-10-20.
  • GitHub Actions: 1 critical advisory (j178/prek-action). Check with grep -rn 'uses: <owner>/<action>' .github/workflows.
  • None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

Known exploited (CISA KEV) 5

Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.

CVEProduct and flawCISA due
CVE-2025-59689Libraesva Email Security Gateway
Libraesva Email Security Gateway Command Injection Vulnerability		2025-10-20
CVE-2025-32463Sudo Sudo
Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability		2025-10-20
CVE-2025-20352Cisco IOS and IOS XE
Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability		2025-10-20
CVE-2025-10035Fortra GoAnywhere MFT
Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability Ransomware		2025-10-20
CVE-2021-21311Adminer Adminer
Adminer Server-Side Request Forgery Vulnerability		2025-10-20

Critical advisories by ecosystem 1

GitHub-reviewed advisories rated critical, published this day (Pacific time).

GitHub Actions 1

Check: grep -rn 'uses: <owner>/<action>' .github/workflows