Cyber alerts

2,983 results

December 2025

CC-4733 Medium

Published Friday 19 December 2025 (01:25) (updated 19 December 2025)

Critical Vulnerability in WatchGuard Firebox Under Exploitation

Successful exploitation of CVE-2025-14733 could allow a remote unauthenticated attacker to execute code remotely.

CC-4731 Medium

Published Thursday 18 December 2025 (01:35) (updated 18 December 2025)

SonicWall Releases Security Advisory for SonicWall SMA1000 Series Appliances

When chained together, CVE-2025-40602 and CVE-2025-23006 could lead to allow for unauthenticated remote code execution with root privileges

CC-4732 Medium

Published Thursday 18 December 2025 (01:27) (updated 16 January 2026)

Ongoing Exploitation Campaign affecting Cisco Secure Email Gateway And Cisco Secure Email and Web Manager

CVE-2025-20393 could allow an attacker to execute arbitrary code with root privileges

CC-4730 Medium

Published Thursday 18 December 2025 (01:19) (updated 18 December 2025)

Remote Code Execution Vulnerability Affecting Apache Commons Text

Security update addresses a critical severity vulnerability in the Apache Commons Text library that could lead to remote code execution in Claris FileMaker Server

CC-4729 Medium

Published Wednesday 17 December 2025 (01:45) (updated 17 December 2025)

NetSupport Releases Security Updates for NetSupport Manager

Successful exploitation could lead to arbitrary local file disclosure, unauthorised access to NetSupport Manager and remote code execution in the context of the NetSupport Manager connectivity service.

CC-4728 Medium

Published Friday 12 December 2025 (01:22) (updated 12 December 2025)

React Issues Additional Security Updates for React Server Components

Successful exploitation could allow an attacker to expose source code or lead to a denial of service condition

CC-4727 Medium

Published Thursday 11 December 2025 (01:08) (updated 15 December 2025)

Google Releases Security Update for Chrome

Security update addresses one exploited high severity vulnerability and two medium severity vulnerabilities in Google Chrome

CC-4726 Medium

Published Wednesday 10 December 2025 (01:42) (updated 10 December 2025)

Ivanti Releases Critical Security Updates for Endpoint Manager

1 critical and 3 high severity vulnerabilities could allow a remote unauthenticated attacker to perform remote code execution in the context of an administrator session.

CC-4725 Medium

Published Wednesday 10 December 2025 (01:39) (updated 10 December 2025)

Microsoft Releases December 2025 Security Updates

Scheduled updates for Microsoft products address 57 vulnerabilities, of which 1 is under exploitation and 2 have been reported as publicly disclosed

CC-4724 Medium

Published Wednesday 10 December 2025 (12:24) (updated 16 December 2025)

Fortinet Releases Security Advisory for FortiCloud SSO Login Authentication Bypass

The security advisory address two vulnerabilities that could allow an attacker to bypass the FortiCloud SSO login authentication via a crafted SAML message