CVEs published in September 2025

39 tracked CVEs from 13 vendors had their first vendor advisory published in September 2025: 5 critical, 8 high, 1 in CISA KEV. Newest first.

7 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.

CVE-2025-10871Low
Missing Authorization in GitLab
GitLab · 1 advisory
Added Nov 3, 2026
CVE-2025-54831Unrated
Apache Airflow: Connection sensitive details exposed to users with READ permissions
Apache · 1 advisory
Added Nov 3, 2026
CVE-2024-28956Medium
Intel Processor Vulnerability in NetApp Products
NetApp · 1 advisory
Added Oct 30, 2026
CVE-2025-10948High
RouterOS: vulnerability has been found in MikroTik RouterOS 7.
MikroTik · 1 advisory
Added Sep 25, 2025
CVE-2025-20338Medium
vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with administrative privileges to execute arbitrary commands as root on the underlying operating system of an affected device
Cisco · 1 advisory
Added Nov 3, 2026
CVE-2025-9900High
Libtiff: libtiff write-what-where
NetApp, Red Hat · 2 advisories
Added Sep 23, 2026
CVE-2025-9242CriticalCISA KEV
WatchGuard Firebox Out-of-Bounds Write Vulnerability
WatchGuard · 1 advisory
Added Aug 10, 2026
CVE-2025-37131Medium
vulnerability in EdgeConnect SD-WAN ECOS could
Aruba · 1 advisory
Added Sep 16, 2025
CVE-2025-37130Medium
vulnerability in the command-line interface of EdgeConnect SD-WAN could
Aruba · 1 advisory
Added Sep 16, 2025
CVE-2025-37129Medium
vulnerable feature in the command line interface of EdgeConnect SD-WAN could
Aruba · 1 advisory
Added Sep 16, 2025
CVE-2025-37128Medium
vulnerability in the web API of HPE Aruba Networking EdgeConnect SD-WAN Gateways could
Aruba · 1 advisory
Added Sep 16, 2025
CVE-2025-37127High
vulnerability in the cryptographic logic used by HPE Aruba Networking EdgeConnect SD-WAN Gateways could
Aruba · 1 advisory
Added Sep 16, 2025
CVE-2025-37126High
vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN Gateways Command Line Interface
Aruba · 1 advisory
Added Sep 16, 2025
CVE-2025-37125High
EdgeConnect: broken access control vulnerability exists in HPE Aruba Networking EdgeConnect OS (ECOS).
Aruba · 1 advisory
Added Sep 16, 2025
CVE-2025-37123High
vulnerability in the command-line interface of HPE Aruba Networking EdgeConnect SD-WAN Gateways could
Aruba · 1 advisory
Added Sep 16, 2025
CVE-2025-6947Medium
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration
WatchGuard · 2 advisories
Added Jul 11, 2026
CVE-2025-6999Medium
WatchGuard Firebox Authentication Portal Request Smuggling Vulnerability
WatchGuard · 1 advisory
Added Aug 10, 2026
CVE-2025-4234Low
Cortex XDR Microsoft 365 Defender Pack: Cleartext Exposure of Credentials
Palo Alto · 1 advisory
Added Nov 3, 2026
CVE-2025-8885Critical
Bouncy Castle Vulnerability in NetApp Products
NetApp · 2 advisories
Added Aug 21, 2026
CVE-2025-54351Critical
Iperf3 Vulnerability in NetApp Products
NetApp · 1 advisory
Added Sep 16, 2026
CVE-2025-54349Critical
Iperf3 Vulnerability in NetApp Products
NetApp · 1 advisory
Added Sep 16, 2026
CVE-2025-34178Medium
In pfSense CE /suricata/suricata_app_parsers.php, the value of the policy_name parameter is not sanitized of HTML-related…
pfSense · 1 advisory
Added Sep 9, 2025
CVE-2025-34177Medium
In pfSense CE /suricata/suricata_flow_stream.php, the value of the policy_name parameter is not sanitized of HTML-related…
pfSense · 1 advisory
Added Sep 9, 2025
CVE-2025-34176Medium
In pfSense CE /suricata/suricata_ip_reputation.php, the value of the iplist parameter is not sanitized of directory…
pfSense · 1 advisory
Added Sep 9, 2025
CVE-2025-10159Critical
authentication bypass vulnerability
Sophos · 1 advisory
Added Sep 9, 2025
CVE-2025-34175Medium
In pfSense CE /usr/local/www/suricata/suricata_filecheck.php, the value of the filehash parameter is directly displayed without…
pfSense · 1 advisory
Added Sep 9, 2025
CVE-2025-34174Medium
In pfSense CE /usr/local/www/status_traffic_totals.php, the value of the start-day parameter is not ensured to be a numeric…
pfSense · 1 advisory
Added Sep 9, 2025
CVE-2025-34173Medium
In pfSense CE /usr/local/www/snort/snort_ip_reputation.php, the value of the iplist parameter is not sanitized of directory…
pfSense · 1 advisory
Added Sep 9, 2025
CVE-2025-34172Medium
In pfSense CE /usr/local/www/haproxy/haproxy_stats.php, the value of the showsticktablecontent parameter is displayed after…
pfSense · 1 advisory
Added Sep 9, 2025
CVE-2025-57540Medium
Proxmox Virtual Environment: stored cross-site scripting (XSS) vulnerability exists in the WebAuthn Relying Party field within the Datacenter configuration…
Proxmox · 1 advisory
Added Sep 9, 2025
CVE-2025-57539Medium
Proxmox Virtual Environment: stored cross-site scripting (XSS) vulnerability in the U2F Origin field of the Datacenter configuration in Proxmox Virtual…
Proxmox · 1 advisory
Added Sep 9, 2025
CVE-2025-57538Medium
Proxmox Virtual Environment: stored cross-site scripting (XSS) vulnerability in the HTTP Proxy field within the Datacenter configuration panel of Proxmox…
Proxmox · 1 advisory
Added Sep 9, 2025
CVE-2025-5244Medium
GNU Binutils Vulnerability in NetApp Products
NetApp · 1 advisory
Added Sep 18, 2026
CVE-2025-4674High
Golang Vulnerability in NetApp Products
NetApp · 1 advisory
Added Sep 16, 2026
CVE-2024-12718Medium
Python Vulnerability in NetApp Products
NetApp · 1 advisory
Added Jul 15, 2026
CVE-2025-57790High
Path Traversal Vulnerability
Commvault · 1 advisory
Added Jul 6, 2026
CVE-2025-57788Medium
Unauthorized API Access Risk
Commvault · 1 advisory
Added Jul 6, 2026
CVE-2025-57791Medium
Argument Injection Vulnerability in CommServe
Commvault · 1 advisory
Added Jul 6, 2026
CVE-2025-57789Medium
Vulnerability in Initial Administrator Login Process
Commvault · 1 advisory
Added Jul 6, 2026