Vulnerabilitycritical
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [27 January]
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2016-0287 | IBM i Access 7.1 on Windows allows local users to discover registry passwords via unspecified vectors | 7.8 | <1% | ||
| CVE-2021-26855 | Unauthenticated SSRF/RCE in Microsoft Exchange Server (ProxyLogon) | 9.1 | 100% | KEVRansomwarePoC ×4 | KEV |
| CVE-2024-32444 | Incorrect Privilege Assignment vulnerability in InspiryThemes RealHomes realhomes allows Privilege Escalation.This issue affects RealHomes | 9.8 | <1% | ||
| CVE-2024-32555 | Incorrect Privilege Assignment vulnerability in InspiryThemes Easy Real Estate easy-real-estate allows Privilege Escalation.This issue affects Easy Real Estate | 9.8 | <1% | ||
| CVE-2024-9042 | This CVE affects only Windows worker nodes | 5.9 | 1% | ||
| CVE-2025-0411 | Mark-of-the-Web Bypass in 7-Zip Enables Code Execution via Crafted Archives | 7.0 | 67% | KEV | KEV |
| CVE-2025-20156 | A vulnerability in the REST API of Cisco Meeting Management could allow a remote, authenticated attacker with low privileges to elevate privileges to… | 9.9 | 1% | ||
| CVE-2025-21556 | Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component | 9.9 | <1% | ||
| CVE-2025-21613 | go-git is a highly extensible git implementation library written in pure Go | 9.2 | 1% | ||
| CVE-2025-23006 | Unauthenticated Deserialization RCE in SonicWall SMA1000 Appliances | 9.8 | 27% | KEVRansomware | KEV |
From the original article
10 min read at thehackernews.com
Welcome to your weekly cybersecurity scoop! Ever thought about how the same AI meant to protect our hospitals could also compromise them? This week, we’re breaking down the sophisticated world of AI-driven threats, key updates in regulations, and some urgent vulnerabilities in healthcare tech that need our attention.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.