---
title: "Security digest: October 2, 2025"
url: https://erroneo.us/security/2025-10-02/
description: "October 2, 2025 vulnerability digest: 5 CISA KEV additions (GNU, Jenkins, Juniper, Samsung…). What to patch and who can relax."
type: security-digest-day
section: "Security Digest"
date_published: 2025-10-02
date_modified: 2025-10-02
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: October 2, 2025

5 known exploited (cisa kev) additions.

## Take stock

- Do you run any of these? Smartbedded Meteobridge, Samsung Mobile Devices, Jenkins Jenkins, Juniper ScreenOS, GNU GNU Bash. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2025-10-23.
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Known exploited (CISA KEV)

- [CVE-2025-4008](https://erroneo.us/security/cve/CVE-2025-4008/index.md) Smartbedded Meteobridge: Smartbedded Meteobridge Command Injection Vulnerability (CISA due 2025-10-23)
- [CVE-2025-21043](https://erroneo.us/security/cve/CVE-2025-21043/index.md) Samsung Mobile Devices: Samsung Mobile Devices Out-of-Bounds Write Vulnerability (CISA due 2025-10-23)
- [CVE-2017-1000353](https://erroneo.us/security/cve/CVE-2017-1000353/index.md) Jenkins Jenkins: Jenkins Remote Code Execution Vulnerability (CISA due 2025-10-23)
- [CVE-2015-7755](https://erroneo.us/security/cve/CVE-2015-7755/index.md) Juniper ScreenOS: Juniper ScreenOS Improper Authentication Vulnerability (CISA due 2025-10-23)
- [CVE-2014-6278](https://erroneo.us/security/cve/CVE-2014-6278/index.md) GNU GNU Bash: GNU Bash OS Command Injection Vulnerability (CISA due 2025-10-23)

## Critical advisories

None.

---
Source page: https://erroneo.us/security/2025-10-02/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt