RansomwarecriticalExploited in the wild

Security Affairs newsletter Round 546 by Pierluigi Paganini

Security Affairsby @securityaffairsOct 25, 2025 · 22:12 UTC (Oct 25, 2025)4 min read3 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2025-61884 CVE-2025-9242 CVE-2025-49844

Tags: cve-2025-61884 cve-2025-9242 cve-2025-49844 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-49844	Use-After-Free (RediShell) RCE in Redis Lua Scripting	9.9	83%	PoC	Oct 3, 2025
CVE-2025-61884	Unauthenticated SSRF in Oracle E-Business Suite Configurator	7.5	96%	KEVRansomwarePoC	Oct 12, 2025 KEV Oct 20, 2025
CVE-2025-9242	Out-of-Bounds Write in WatchGuard Fireware OS iked Enables Unauthenticated RCE	9.3	92%	KEVPoC	Sep 17, 2025 KEV Nov 12, 2025

From the original article

4 min read at securityaffairs.com

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.