New that day
- highpatchedexploited Adobe Commerce and Magento Improper Input Validation Vulnerability Adobe Commerce and Magento Adobe Commerce and Magento Open Source contain an improper input validation vulnerability that could allow an attacker to take over customer accounts through the Commerce REST API. Added to CISA KEV on 2025-10-24 (federal deadline 2025-11-14).
- highpatchedexploited Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability Microsoft Windows Server Update Service (WSUS) contains a deserialization of untrusted data vulnerability that allows for remote code execution. Added to CISA KEV on 2025-10-24 (federal deadline 2025-11-14).