U.S. CISA adds SKYSEA Client View, Rapid7 Velociraptor, Microsoft Windows, and IGEL OS flaws to its Known Exploited Vulnerabilities catalog
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2016-7836 | Unauthenticated RCE in SKYSEA Client View Management Console | 9.8 | 19% | KEVPoC | KEV |
CVE-2025-24990+1 related CVE | Untrusted Pointer Dereference in Windows Agere Modem Driver (ltmdm64.sys) | 7.8 | 6% | KEV | KEV |
| CVE-2025-47827 | Secure Boot Bypass via Expired Key in IGEL OS Before 11 (CVE-2025-47827) | 4.6 | 5% | KEVPoC | KEV |
| CVE-2025-6264 | Velociraptor allows collection of VQL queries packaged into Artifacts from endpoints | 5.5 | 1% | PoC ×2 |
From the original article
2 min read at securityaffairs.com
U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds OracSKYSEA Client View, Rapid7 Velociraptor, Microsoft Windows, and IGEL OS flaws to its Known Exploited Vulnerabilities catalog.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.