Security Digest archive
September 2025
3 editorial briefs, 16 known exploited (cisa kev) additions and 38 critical advisories across 20 digest days.
Tuesday, September 30, 2025
- Critical 1 advisory: check-branches
Monday, September 29, 2025
- KEV CVE-2025-59689 Libraesva Email Security Gateway
- KEV CVE-2025-32463 Sudo Sudo
- KEV CVE-2025-20352 Cisco IOS and IOS XE
- KEV CVE-2025-10035 Fortra GoAnywhere MFT
- KEV CVE-2021-21311 Adminer Adminer
- Critical 1 advisory: j178/prek-action
Friday, September 26, 2025
- Critical 1 advisory: get-jwks
Thursday, September 25, 2025
- Patch this week Cisco ASA/FTD VPN Zero-Days Tied to ArcaneDoor
- KEV CVE-2025-20362 Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense
- KEV CVE-2025-20333 Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense
- Critical 2 advisories: cors-anywhere, github.com/gardener/gardener-extension…
Wednesday, September 24, 2025
- Critical 2 advisories: org.apache.iotdb:iotdb-confignode, adb-mcp
Tuesday, September 23, 2025
- KEV CVE-2025-10585 Google Chromium V8
- Critical 1 advisory: DotNetNuke.Core
Monday, September 22, 2025
- Critical 1 advisory: ai.h2o:h2o-core
Thursday, September 18, 2025
- Critical 1 advisory: invokeai
Wednesday, September 17, 2025
- Critical 1 advisory: com.hubspot.jinjava:jinjava
Tuesday, September 16, 2025
- Critical 1 advisory: org.springframework.cloud:spring-cloud…
Monday, September 15, 2025
- Check exposure Shai-Hulud: Self-Replicating Worm Hits 500+ npm Packages
- Critical 8 advisories: github.com/chaos-mesh/chaos-mesh, flowise, flowise, flowise, mcp-kubernetes-server, flowise, github.com/chaos-mesh/chaos-mesh, github.com/chaos-mesh/chaos-mesh
Friday, September 12, 2025
- Critical 1 advisory: flowise
Thursday, September 11, 2025
- KEV CVE-2025-5086 Dassault Systèmes DELMIA Apriso
- Critical 1 advisory: prebid-universal-creative
Wednesday, September 10, 2025
- Critical 5 advisories: github.com/SpectoLabs/hoverfly, picklescan, picklescan, picklescan, interactive-git-checkout
Tuesday, September 9, 2025
- Critical 1 advisory: magento/community-edition
Monday, September 8, 2025
- Most can relax chalk, debug and 16+ npm Packages Hijacked via Phishing
- Critical 3 advisories: github.com/prest/prest/v2, @akoskm/create-mcp-server-stdio, codeceptjs
Friday, September 5, 2025
- Critical 1 advisory: internetarchive
Thursday, September 4, 2025
- KEV CVE-2025-53690 Sitecore Multiple Products
- KEV CVE-2025-48543 Android Runtime
- KEV CVE-2025-38352 Linux Kernel
- Critical 3 advisories: TkEasyGUI, github.com/argoproj/argo-cd/v2, usd-core
Wednesday, September 3, 2025
- KEV CVE-2025-9377 TP-Link Multiple Routers
- KEV CVE-2023-50224 TP-Link TL-WR841N
- Critical 3 advisories: org.xwiki.platform:xwiki-platform-webja…, deepdiff, org.xwiki.platform:xwiki-platform-skin…
Tuesday, September 2, 2025
- KEV CVE-2025-55177 Meta Platforms WhatsApp
- KEV CVE-2020-24363 TP-Link TL-WA855RE