Ransomwarecritical

Security Affairs newsletter Round 543 by Pierluigi Paganini

Security Affairsby @securityaffairsSep 28, 2025 · 12:23 UTC (Sep 28, 2025)3 min read2 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2025-53149 CVE-2025-10035 CVE-2025-26399

Tags: cve-2025-53149 cve-2025-10035 cve-2025-26399 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-10035	Deserialization Flaw in Fortra GoAnywhere MFT License Servlet Enables RCE	9.8	100%	KEVRansomwarePoC	Sep 18, 2025 KEV Sep 29, 2025
CVE-2025-26399	Unauthenticated Deserialization RCE in SolarWinds Web Help Desk	9.8	91%	KEVRansomware	Sep 23, 2025 KEV Mar 9, 2026
CVE-2025-53149	Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally	7.8	<1%	PoC	Aug 12, 2025

From the original article

3 min read at securityaffairs.com

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.