--- title: "Security digest: September 29, 2025" url: https://erroneo.us/security/2025-09-29/ description: "September 29, 2025 vulnerability digest: 5 CISA KEV additions (Adminer, Cisco, Fortra, Libraesva, Sudo); 1 critical advisory (GitHub Actions). What to patch…" type: security-digest-day section: "Security Digest" date_published: 2025-09-29 date_modified: 2025-09-29 publisher: erroneo.us author: erroneo.us Security Desk license: All rights reserved. Quote with attribution and a link. --- # Security digest: September 29, 2025 5 known exploited (cisa kev) additions and 1 critical advisory. ## Take stock - Do you run any of these? Libraesva Email Security Gateway, Sudo Sudo, Cisco IOS and IOS XE, Fortra GoAnywhere MFT, Adminer Adminer. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2025-10-20. - GitHub Actions: 1 critical advisory ( j178/prek-action ). Check with grep -rn 'uses: /' .github/workflows . - None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully. ## Known exploited (CISA KEV) - [CVE-2025-59689](https://erroneo.us/security/cve/CVE-2025-59689/index.md) Libraesva Email Security Gateway: Libraesva Email Security Gateway Command Injection Vulnerability (CISA due 2025-10-20) - [CVE-2025-32463](https://erroneo.us/security/cve/CVE-2025-32463/index.md) Sudo Sudo: Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability (CISA due 2025-10-20) - [CVE-2025-20352](https://erroneo.us/security/cve/CVE-2025-20352/index.md) Cisco IOS and IOS XE: Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability (CISA due 2025-10-20) - [CVE-2025-10035](https://erroneo.us/security/cve/CVE-2025-10035/index.md) Fortra GoAnywhere MFT: Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability (CISA due 2025-10-20) - [CVE-2021-21311](https://erroneo.us/security/cve/CVE-2021-21311/index.md) Adminer Adminer: Adminer Server-Side Request Forgery Vulnerability (CISA due 2025-10-20) ## Critical advisories - [GHSA-pwf7-47c3-mfhx](https://erroneo.us/security/ghsa/GHSA-pwf7-47c3-mfhx/index.md) j178/prek-action vulnerable to arbitrary code injection in composite action — GitHub Actions j178/prek-action <= 1.0.5 → 1.0.6 --- Source page: https://erroneo.us/security/2025-09-29/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt