Security Digest archive
December 2025
4 editorial briefs, 20 known exploited (cisa kev) additions and 37 critical advisories across 20 digest days.
Tuesday, December 30, 2025
- Critical 1 advisory: rustfs
Monday, December 29, 2025
- KEV CVE-2025-14847 MongoDB MongoDB and MongoDB Server
Friday, December 26, 2025
- Critical 2 advisories: apidoc-core, n8n
Tuesday, December 23, 2025
- Patch this week LangGrinch: LangChain Core Serialization Injection
- Critical 2 advisories: smolagents, langchain-core
Monday, December 22, 2025
- KEV CVE-2023-52163 Digiever DS-2105 Pro
- Critical 1 advisory: n8n
Friday, December 19, 2025
- Patch this week MongoBleed: Pre-Auth Memory Leak in MongoDB Server
- KEV CVE-2025-14733 WatchGuard Firebox
Thursday, December 18, 2025
- Critical 2 advisories: github.com/ollama/ollama, Weblate
Wednesday, December 17, 2025
- KEV CVE-2025-59374 ASUS Live Update
- KEV CVE-2025-40602 SonicWall SMA1000 appliance
- KEV CVE-2025-20393 Cisco Multiple Products
- Critical 3 advisories: pagekit/pagekit, pagekit/pagekit, apache-airflow-providers-edge3
Tuesday, December 16, 2025
- KEV CVE-2025-59718 Fortinet Multiple Products
Monday, December 15, 2025
- KEV CVE-2025-43529 Apple Multiple Products
- KEV CVE-2025-14611 Gladinet CentreStack and Triofox
- Critical 2 advisories: github.com/redhat-developer/gitops-oper…, getgrav/grav
Friday, December 12, 2025
- KEV CVE-2025-14174 Google Chromium
- KEV CVE-2018-4063 Sierra Wireless AirLink ALEOS
- Critical 1 advisory: mineadmin/mineadmin
Thursday, December 11, 2025
- KEV CVE-2025-58360 OSGeo GeoServer
- Critical 1 advisory: pgadmin4
Wednesday, December 10, 2025
- Critical 1 advisory: ibexa/user
Tuesday, December 9, 2025
- Act now FortiCloud SSO SAML Bypass: CVE-2025-59718/59719
- KEV CVE-2025-62221 Microsoft Windows
- KEV CVE-2025-6218 RARLAB WinRAR
- Critical 6 advisories: net.sf.robocode:robocode.core, elysia, neuron-core/neuron-ai, onelogin/php-saml, cai-framework, net.sf.robocode:robocode.battle
Monday, December 8, 2025
- KEV CVE-2025-66644 Array Networks ArrayOS AG
- KEV CVE-2022-37055 D-Link Routers
- Critical 6 advisories: ruby-saml, n8n, github.com/gofiber/utils/v2, @vitejs/plugin-rsc, ruby-saml, github.com/zitadel/zitadel
Friday, December 5, 2025
- KEV CVE-2025-55182 Meta React Server Components
- Critical 1 advisory: langflow
Thursday, December 4, 2025
- Critical 1 advisory: org.apache.tika:tika-core
Wednesday, December 3, 2025
- Act now React2Shell: Unauthenticated RCE in React Server Components
- KEV CVE-2021-26828 OpenPLC ScadaBR
- Critical 4 advisories: github.com/smallstep/certificates, react-server-dom-webpack, @vitejs/plugin-rsc, next
Tuesday, December 2, 2025
- KEV CVE-2025-48633 Android Framework
- KEV CVE-2025-48572 Android Framework
- Critical 2 advisories: asyncmy, mautic/core
Monday, December 1, 2025
- Critical 1 advisory: mcp-watch