Week in review: F5 data breach, Microsoft patches three actively exploited zero-days
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-20352 | SNMP Stack Buffer Overflow in Cisco IOS and IOS XE Enables DoS and Root RCE | 7.7 | 42% | KEV | KEV |
CVE-2025-24990+1 related CVE | Untrusted Pointer Dereference in Windows Agere Modem Driver (ltmdm64.sys) | 7.8 | 6% | KEV | KEV |
| CVE-2025-47827 | Secure Boot Bypass via Expired Key in IGEL OS Before 11 (CVE-2025-47827) | 4.6 | 5% | KEVPoC | KEV |
| CVE-2025-54253 | Pre-Auth RCE in Adobe Experience Manager Forms via Struts DevMode Misconfiguration | 10.0 | 89% | KEVPoC | KEV |
| CVE-2025-61884 | Unauthenticated SSRF in Oracle E-Business Suite Configurator | 7.5 | 96% | KEVRansomwarePoC | KEV |
From the original article
7 min read at helpnetsecurity.com
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: In this Help Net Security interview, Wayman Cummings, CISO at Ochsner Health, talks about building a healthcare cybersecurity strategy, even when resources are tight. He explains how focusing on areas like vulnerability management and network segmentation can make the biggest difference.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.