CISA warns about actively exploited Broadcom, Commvault vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-1976 | Admin-to-Root Privilege Escalation in Broadcom Brocade Fabric OS 9.1 | 8.6 | <1% | KEV | KEV |
| CVE-2025-3928 | Actively Exploited Authenticated Webshell Flaw in Commvault Web Server | 8.7 | 3% | KEV | KEV |
| CVE-2025-42599 | Unauthenticated RCE via Stack-Based Buffer Overflow in Qualitia Active! mail 6 | 9.8 | 3% | KEV | KEV |
From the original article
3 min read at helpnetsecurity.com
The Cybersecurity and Infrastructure Security Agency (CISA) has added three new flaws to its Known Exploited Vulnerabilities catalog on Monday, affecting Commvault (CVE-2025-3928), Active! Mail (CVE-2025-42599), and Broadcom Brocade (CVE-2025-1976) solutions.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.