August 21–27, 2025

Your no-fluff dispatch of vulnerabilities actively exploited in the wild. Patch fast, stay ahead.

🚨 Exploited CVEs This Week

• CVE-2025-43300 – Apple iOS/iPadOS/macOS zero-day via malicious image files. Actively exploited.
• CVE-2025-7775 – Citrix NetScaler overflow → full system hijack. Used for backdoors.
• CVE-2025-20286 – Cisco Identity Services Engine auth bypass → root access.
• CVE-2025-49113 – Roundcube webmail bug → active account takeovers.
• CVE-2025-5419 – Chrome sandbox escape → code execution via malicious sites.
• CVE-2025-21479, CVE-2025-21480, CVE-2025-27038 – Qualcomm flaws → kernel code exec on Android.
• CVE-2025-37093 – HPE StoreOnce RCE → exploited for ransomware/data theft.
• CVE-2025-48866 – ModSecurity WAF RCE targeting misconfigured gateways.
• CVE-2025-25022 – IBM QRadar Suite flaw → used in breach campaigns.
• CVE-2025-22243 – VMware NSX Manager RCE → lateral movement in virtual envs.
• CVE-2025-24364, CVE-2025-24365 – Vaultwarden password manager flaws → mass compromise attempts.

🛠 Quick Patch Recap

• Prioritize updates for Apple, Citrix, Cisco, Chrome, VMware.
• Cross-check with CISA’s Known Exploited Vulnerabilities Catalog.