Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-13797 | critical | 9.8 | No | A vulnerability was detected in ADSLR B-QE2W401 250814-r037c. Affected by this issue is the function parameterdel_swifimac of the file /send... | 2026-10-18 |
| CVE-2025-66022 | critical | 9.8 | No | FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to version 1.7.1, an extension execution path in Faction’s exte... | 2026-10-18 |
| CVE-2025-66262 | critical | 9.8 | No | Arbitrary File Overwrite via Tar Extraction Path Traversal in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50,... | 2026-10-18 |
| CVE-2025-66261 | critical | 9.8 | No | Unauthenticated OS Command Injection (restore_settings.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50... | 2026-10-18 |
| CVE-2025-66259 | critical | 9.8 | No | Authenticated Root Remote Code Execution via improrer user input filtering in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter... | 2026-10-18 |
| CVE-2025-66257 | critical | 9.1 | No | Unauthenticated Arbitrary File Deletion (patch_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 5... | 2026-10-18 |
| CVE-2025-66256 | critical | 9.8 | No | Unauthenticated Arbitrary File Upload (patch_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50,... | 2026-10-18 |
| CVE-2025-66255 | critical | 9.8 | No | Unauthenticated Arbitrary File Upload (upgrade_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 5... | 2026-10-18 |
| CVE-2025-66254 | critical | 9.1 | No | Unauthenticated Arbitrary File Deletion (upgrade_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30,... | 2026-10-18 |
| CVE-2025-66253 | critical | 9.8 | No | Unauthenticated OS Command Injection (start_upgrade.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 1... | 2026-10-18 |
| CVE-2025-66251 | critical | 9.1 | No | Unauthenticated Path Traversal with Arbitrary File Deletion in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50... | 2026-10-18 |
| CVE-2025-66250 | critical | 9.8 | No | Unauthenticated Arbitrary File Upload (status_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50... | 2026-10-18 |
| CVE-2025-64656 | critical | 9.8 | No | Out-of-bounds read in Application Gateway allows an unauthorized attacker to elevate privileges over a network. | 2026-10-18 |
| CVE-2025-65085 | critical | 9.8 | No | A Heap-based Buffer Overflow vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.21... | 2026-10-18 |
| CVE-2025-65084 | critical | 9.8 | No | An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and... | 2026-10-18 |
| CVE-2025-13560 | critical | 9.8 | No | A vulnerability was found in SourceCodester Company Website CMS 1.0. This affects an unknown part of the file /admin/reset-password.php. The... | 2026-10-18 |
| CVE-2025-13557 | critical | 9.8 | No | A vulnerability has been found in Campcodes Online Polling System 1.0. Affected by this issue is some unknown functionality of the file /reg... | 2026-10-18 |
| CVE-2025-13556 | critical | 9.8 | No | A flaw has been found in Campcodes Online Polling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/... | 2026-10-18 |
| CVE-2025-13555 | critical | 9.8 | No | A vulnerability was detected in Campcodes School File Management System 1.0. Affected is an unknown function of the file /index.php of the c... | 2026-10-18 |
| CVE-2025-13554 | critical | 9.8 | No | A security vulnerability has been detected in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /index.... | 2026-10-18 |