Windows, Linux, identity, virtualisation, networks and platforms.
Microsoft says September’s Windows security updates can destabilise Remote Desktop Services, break sign-ins and leave virtual machines reachable only through their management console.
CISA now marks CVE-2025-14733 as used in ransomware campaigns. WatchGuard Firebox operators need to patch, investigate and rotate stored secrets.
A critical Cisco Nexus 9000 flaw exposes root-level remote code execution through TCP ports 43210 and 43211 on affected Silicon One switches.
HPE's ArubaOS-CX bulletin fixes 34 vulnerabilities, including an unauthenticated network RCE and two adjacent-network routes to code execution.
CISA has added a seven-year-old Microsoft SQL Server vulnerability to its exploited list, turning forgotten database instances into an urgent incident-response problem.
A passwordless Proxmox VE authentication bypass was fixed in 2023 but disclosed three years later, leaving exposed end-of-life control planes at urgent risk.
CISA says attackers are exploiting a Switchvox SQL injection that turns one unauthenticated web request into operating-system command execution.
Three critical WatchGuard Firebox flaws let unauthenticated VPN traffic reach remote code execution. The full bulletin contains eleven Fireware vulnerabilities.
Seven flaws affect every Cisco IOS XR release, two carry a 9.8 score, and operators have no general workaround while planning fixes.
Fire Ant turned a Cisco IOS XR router, TACACS systems and Linux management hosts into a covert collection and access platform.
