A critical security vulnerability (CVE-2025-34028) with a CVSS score of 9.0 has been discovered in Commvault Command Center, allowing unauthenticated attackers to execute arbitrary code. The flaw affects versions 11.38.0-11.38.19 and exploits the "deployWebpackage.do" endpoint to create a ...
CISA has added CVE-2025-30406, a critical vulnerability in Gladinet CentreStack, to its KEV catalog after confirming active exploitation. The flaw (CVSS 9.0) involves a hard-coded cryptographic key in the web.config file that allows attackers to forge ViewState payloads, enabling remote co...
Veeam has patched a critical remote code execution vulnerability (CVE-2025-23120) in its Backup & Replication software affecting domain-joined installations of version 12.3.0.310 and earlier. The flaw is a deserialization vulnerability that allows any domain user to execute malicious code....
Microsoft's March 2025 Patch Tuesday addresses 57 vulnerabilities, including six actively exploited zero-days and six critical remote code execution flaws. The update fixes vulnerabilities across multiple categories: elevation of privilege (23), remote code execution (23), information disc...
CISA reports a critical security vulnerability (CVE-2025-23209) in Craft CMS versions 4 and 5, scoring 8.1 CVSS, which could enable remote code execution through compromised security keys. The flaw affects versions up to 4.13.8 and 5.5.5, with patches available. Federal agencies must imple...
