CVEs published in December 2025
47 tracked CVEs from 11 vendors had their first vendor advisory published in December 2025: 6 critical, 19 high, 3 in CISA KEV. Newest first.
9 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2025-66471High
Urllib3 Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-66418High
Urllib3 Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-66412High
Angular Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-66035High
Angular Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-62408Medium
C-ares Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-40281High
Linux Kernel Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-39828High
Linux Kernel Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-39823Medium
Linux Kernel Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-38734High
Linux Kernel Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-10966Medium
Libcurl Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2023-2283Medium
Libssh Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-8305Medium
authenticated local user can obtain information that allows claiming security policy rules of another user
Check Point · 1 advisory - Added
CVE-2025-8304Medium
authenticated local user can obtain information that allows claiming security policy rules of another user
Check Point · 1 advisory - Added
CVE-2025-14733CriticalCISA KEV
WatchGuard Firebox Out of Bounds Write Vulnerability
WatchGuard · 1 advisory - Added
CVE-2025-58181Medium
Golang Vulnerability in NetApp Products
NetApp · 1 advisory - Added
Python Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-13836Medium
Python Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-20393CriticalCISA KEV
Cisco Multiple Products Improper Input Validation Vulnerability
Cisco · 1 advisory - Added
CVE-2025-14727High
NGINX Ingress Controller vulnerability
F5 · 1 advisory - Added
CVE-2025-62849Critical
QTS: SQL injection vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-62848High
QTS: NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-62847High
QTS: improper neutralization of argument delimiters in a command vulnerability has been reported to affect several QNAP operating…
QNAP · 1 advisory - Added
CVE-2025-59385Critical
QTS: authentication bypass by spoofing vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-66388Unrated
Apache Airflow: Secrets in rendered templates not redacted properly and exposed in the UI
Apache · 1 advisory - Added
CVE-2025-11083High
GNU Binutils Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-11082High
GNU Binutils Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-8405High
Improper Encoding or Escaping of Output in GitLab
GitLab · 1 advisory - Added
CVE-2025-14087Medium
buffer underflow in gvariant parser leads to heap corruption
NetApp, Red Hat · 2 advisories - Added
CVE-2025-59719Critical
Fortinet · 2 advisories - Added
CVE-2025-59718CriticalCISA KEV
Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
Fortinet · 2 advisories - Added
Improper input validation in NETGEAR Nighthawk router R7000P
NETGEAR · 1 advisory - Added
CVE-2025-14104Medium
Util-linux: util-linux: heap buffer overread in setpwnam when processing 256-byte usernames
NetApp, Red Hat · 2 advisories - Added
CVE-2025-9390Medium
Vim Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-39839Medium
Linux Kernel Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-1547High
WatchGuard Firebox Authenticated Stack Overflow in Certificate Request Command
WatchGuard · 1 advisory - Added
CVE-2025-1910Medium
WatchGuard Mobile VPN with SSL Local Privilege Escalation via Update Package
WatchGuard · 1 advisory - Added
CVE-2025-6946Medium
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in IPS Configuration
WatchGuard · 1 advisory - Added
CVE-2025-1545High
WatchGuard Firebox XPath Injection Vulnerability in Web CGI
WatchGuard · 1 advisory - Added
CVE-2025-11838High
WatchGuard Firebox iked Memory Corruption Vulnerability
WatchGuard · 1 advisory - Added
CVE-2025-13940Medium
WatchGuard Firebox Boot Time System Integrity Check Bypass
WatchGuard · 1 advisory - Added
CVE-2025-13939Medium
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Gateway Wireless Controller
WatchGuard · 1 advisory - Added
CVE-2025-13938Medium
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration Configuration
WatchGuard · 2 advisories - Added
CVE-2025-13937Medium
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in ConnectWise Technology Integration Configuration
WatchGuard · 2 advisories - Added
CVE-2025-13936Medium
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Tigerpaw Technology Integration Configuration
WatchGuard · 2 advisories - Added
CVE-2025-12196High
WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Ping Command
WatchGuard · 1 advisory - Added
CVE-2025-12195High
WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI IPSec Configuration
WatchGuard · 1 advisory - Added
CVE-2025-12026High
WatchGuard Firebox Authenticated Out of Bounds Write in certd
WatchGuard · 1 advisory