---
title: "Security digest: October 6, 2025"
url: https://erroneo.us/security/2025-10-06/
description: "October 6, 2025 vulnerability digest: 7 CISA KEV additions (Linux, Microsoft, Mozilla, Oracle); 4 critical advisories (npm, Maven). What to patch and who…"
type: security-digest-day
section: "Security Digest"
date_published: 2025-10-06
date_modified: 2025-10-06
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: October 6, 2025

7 known exploited (cisa kev) additions and 4 critical advisories.

## Take stock

- Do you run any of these? Oracle E-Business Suite, Microsoft Windows, Linux Kernel, Microsoft Internet Explorer, Mozilla Multiple Products. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2025-10-27.
- npm: 2 critical advisories ( flowise , sillytavern ). Check with npm audit (or: npm ls <package>) .
- Maven: 2 critical advisories ( org.xwiki.platform:xwiki-platform-rest-server , org.xwiki.contrib.oidc:oidc-authenticator ). Check with mvn dependency:tree -Dincludes=<groupId>:<artifactId> .
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Known exploited (CISA KEV)

- [CVE-2025-61882](https://erroneo.us/security/cve/CVE-2025-61882/index.md) Oracle E-Business Suite: Oracle E-Business Suite Unspecified Vulnerability (CISA due 2025-10-27)
- [CVE-2021-43226](https://erroneo.us/security/cve/CVE-2021-43226/index.md) Microsoft Windows: Microsoft Windows Privilege Escalation Vulnerability (CISA due 2025-10-27)
- [CVE-2021-22555](https://erroneo.us/security/cve/CVE-2021-22555/index.md) Linux Kernel: Linux Kernel Heap Out-of-Bounds Write Vulnerability (CISA due 2025-10-27)
- [CVE-2013-3918](https://erroneo.us/security/cve/CVE-2013-3918/index.md) Microsoft Windows: Microsoft Windows Out-of-Bounds Write Vulnerability (CISA due 2025-10-27)
- [CVE-2011-3402](https://erroneo.us/security/cve/CVE-2011-3402/index.md) Microsoft Windows: Microsoft Windows Remote Code Execution Vulnerability (CISA due 2025-10-27)
- [CVE-2010-3962](https://erroneo.us/security/cve/CVE-2010-3962/index.md) Microsoft Internet Explorer: Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability (CISA due 2025-10-27)
- [CVE-2010-3765](https://erroneo.us/security/cve/CVE-2010-3765/index.md) Mozilla Multiple Products: Mozilla Multiple Products Remote Code Execution Vulnerability (CISA due 2025-10-27)

## Critical advisories

- [CVE-2025-55346](https://erroneo.us/security/cve/CVE-2025-55346/index.md) Flowise vulnerable to RCE via Dynamic function constructor injection — npm flowise <= 2.2.7-patch.1 → no fix
- [CVE-2025-52472](https://erroneo.us/security/cve/CVE-2025-52472/index.md) XWiki Platform is vulnerable to HQL injection via wiki and space search REST API — Maven org.xwiki.platform:xwiki-platform-rest-server >= 17.0.0-rc-1, < 17.4.2 → 17.4.2; Maven org.xwiki.platform:xwiki-platform-rest-server >= 4.3-milestone-1, < 16.10.9 → 16.10.9
- [CVE-2025-49594](https://erroneo.us/security/cve/CVE-2025-49594/index.md) XWiki OIDC Authenticator: Users with "view" access can create tokens for any users they can view — Maven org.xwiki.contrib.oidc:oidc-authenticator >= 2.17.1, < 2.18.2 → 2.18.2
- [CVE-2025-59159](https://erroneo.us/security/cve/CVE-2025-59159/index.md) SillyTavern Web Interface Vulnerable DNS Rebinding — npm sillytavern < 1.13.4 → 1.13.4

---
Source page: https://erroneo.us/security/2025-10-06/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt