Emergent Threat Response

Ni8mare and N8scape flaws among multiple critical vulnerabilities affecting n8n

MongoBleed CVE-2025-14847: Critical Memory Leak in MongoDB Allowing Attackers to Extract Sensitive Data

CVE-2025-37164: Critical unauthenticated RCE affecting Hewlett Packard Enterprise OneView

Critical vulnerabilities in Fortinet CVE-2025-59718, CVE-2025-59719, CVE-2026-24858 exploited in the wild

React2Shell (CVE-2025-55182) - Critical unauthenticated RCE affecting React Server Components

CVE-2025-64446: Critical Vulnerability in Fortinet FortiWeb Exploited in the Wild

CVE-2025-61882: Critical 0day in Oracle E-Business Suite exploited in-the-wild

Stephen Fewer, Christiaan Beek

Microsoft 365 Direct Send Abuse

CVE-2025-20333, CVE-2025-20362, CVE-2025-20363 - Multiple critical vulnerabilities affecting Cisco products

CVE-2025-10035 - Critical unauthenticated RCE in GoAnywhere MFT

Akira Ransomware Group Utilizing SonicWall Devices for Initial Access

CVE-2025-7775: Critical NetScaler vulnerability exploited in-the-wild

CVE-2025-53770 - Zero-day exploitation in the wild of Microsoft SharePoint servers

CVE-2025-54309: CrushFTP Zero-Day Exploited in the Wild

Critical Veeam Backup & Replication CVE-2025-23121

CVE-2025-6543: Zero Day Exploitation of NetScaler ADC and NetScaler Gateway

Ivanti Endpoint Manager Mobile exploit chain exploited in the wild

CVE-2025-32756 Exploited in the Wild, Affecting Multiple Fortinet Products

Active exploitation of SAP NetWeaver Visual Composer CVE-2025-31324

Ivanti Connect Secure CVE-2025-22457 exploited in the wild

Multiple vulnerabilities in Ingress NGINX Controller for Kubernetes