CVEs published in October 2025
162 tracked CVEs from 11 vendors had their first vendor advisory published in October 2025: 3 critical, 62 high, 1 in CISA KEV. Newest first.
13 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2025-57740High
Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version…
Fortinet · 1 advisory - Added
CVE-2025-47890Medium
Fortinet · 2 advisories - Added
CVE-2025-31366Medium
Fortinet · 2 advisories - Added
Unchecked Return Value vulnerability [CWE-252] in Fortinet FortiOS version 7.6.0 through 7.6.3 and before 7.4.8 API
Fortinet · 1 advisory - Added
CVE-2025-10243High
Endpoint Manager Mobile: OS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote authenticated attacker with admin privileges to achieve remote code execution
Ivanti · 1 advisory - Added
Insertion of Sensitive 2FA Information in logs and debug command
Fortinet · 1 advisory - Added
CVE-2025-7709Medium
SQLite Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-49844Critical
Redis Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-4056High
Glib Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-57714High
unquoted search path or element vulnerability has been reported to affect NetBak Replicator.
QNAP · 1 advisory - Added
CVE-2025-54154Medium
improper authentication vulnerability has been reported to affect QNAP Authenticator.
QNAP · 1 advisory - Added
CVE-2025-54153High
Qsync: SQL injection vulnerability has been reported to affect Qsync Central.
QNAP · 1 advisory - Added
CVE-2025-53595High
Qsync: SQL injection vulnerability has been reported to affect Qsync Central.
QNAP · 1 advisory - Added
CVE-2025-53407Medium
QTS: use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions
QNAP · 1 advisory - Added
CVE-2025-53406Medium
QTS: use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions
QNAP · 1 advisory - Added
CVE-2025-52867Medium
Qsync: uncontrolled resource consumption vulnerability has been reported to affect Qsync Central.
QNAP · 1 advisory - Added
CVE-2025-52866Medium
QTS: NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-52862Medium
QTS: NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-52860Medium
QTS: NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-52859Medium
QTS: NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-52858Medium
QTS: NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-52857Medium
QTS: NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-52855Medium
QTS: NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-52854Medium
QTS: NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-52853Medium
QTS: NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-52433Medium
QTS: NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-52432Medium
QTS: NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-52429Medium
QTS: use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions
QNAP · 1 advisory - Added
CVE-2025-52428Medium
QTS: NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-52427Medium
QTS: NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-52424Medium
QTS: NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-48730Medium
QTS: use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions
QNAP · 1 advisory - Added
CVE-2025-48729Medium
QTS: NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-48728Medium
QTS: NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-48727Medium
QTS: NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-48726Medium
QTS: NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-47214Medium
QTS: NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-47213Medium
QTS: NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-47212High
QTS: command injection vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-47211Medium
QTS: path traversal vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-47210Medium
Qsync: NULL pointer dereference vulnerability has been reported to affect Qsync Central.
QNAP · 1 advisory - Added
CVE-2025-44014High
Qsync: out-of-bounds write vulnerability has been reported to affect Qsync Central.
QNAP · 1 advisory - Added
CVE-2025-44012Medium
Qsync: allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central.
QNAP · 1 advisory - Added
CVE-2025-44011Medium
Qsync: NULL pointer dereference vulnerability has been reported to affect Qsync Central.
QNAP · 1 advisory - Added
CVE-2025-44010Medium
Qsync: NULL pointer dereference vulnerability has been reported to affect Qsync Central.
QNAP · 1 advisory - Added
CVE-2025-44009Medium
Qsync: NULL pointer dereference vulnerability has been reported to affect Qsync Central.
QNAP · 1 advisory - Added
CVE-2025-44008Medium
Qsync: NULL pointer dereference vulnerability has been reported to affect Qsync Central.
QNAP · 1 advisory - Added
CVE-2025-44007Medium
Qsync: allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central.
QNAP · 1 advisory - Added
CVE-2025-44006Medium
Qsync: allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central.
QNAP · 1 advisory - Added
CVE-2025-33040Medium
Qsync: allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central.
QNAP · 1 advisory - Added
CVE-2025-33039Medium
Qsync: allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central.
QNAP · 1 advisory - Added
CVE-2025-33034Medium
Qsync: path traversal vulnerability has been reported to affect Qsync Central.
QNAP · 1 advisory - Added
CVE-2024-56804High
Video Station: SQL injection vulnerability has been reported to affect Video Station.
QNAP · 1 advisory - Added
CVE-2025-11234High
Qemu-kvm: vnc websocket handshake use-after-free
NetApp, Red Hat · 2 advisories - Added
CVE-2025-9232Medium
OpenSSL Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-9231Medium
OpenSSL Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-9230High
OpenSSL Vulnerability in NetApp Products
NetApp · 2 advisories - Added
CVE-2025-55163High
Apache Netty Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-5115High
Jetty Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2023-6931High
Linux Kernel Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2023-39810High
Busybox Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-22862Medium
Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] in FortiOS 7.4.0 through 7.4.7, 7.2.0…
Fortinet · 1 advisory