New that day
- highpatchedexploited ASUS Live Update Embedded Malicious Code Vulnerability ASUS Live Update contains an embedded malicious code vulnerability client were distributed with unauthorized modifications introduced through a supply chain compromise. The modified builds could cause devices meeting specific targeting conditions to perform unintended actions. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. Added to CISA KEV on 2025-12-17 (federal deadline 2026-01-07).
- highpatchedexploited SonicWall SMA1000 Missing Authorization Vulnerability SonicWall SMA1000 appliance SonicWall SMA1000 contains a missing authorization vulnerability that could allow for privilege escalation appliance management console (AMC) of affected devices. Added to CISA KEV on 2025-12-17 (federal deadline 2025-12-24).
- highpatchedexploited Cisco Multiple Products Improper Input Validation Vulnerability Cisco Secure Email Gateway, Secure Email, AsyncOS Software, and Web Manager appliances contains an improper input validation vulnerability that allows threat actors to execute arbitrary commands with root privileges on the underlying operating system of an affected appliance. Added to CISA KEV on 2025-12-17 (federal deadline 2025-12-24).