Sep 2, 2025
2 new incidents, 1 with updates.
Started
- ClosedPatched
TP-Link TL-WA855RE: TL-WA855RE Missing Authentication for Critical Function Vulnerability
TP-link TL-WA855RE contains a missing authentication for critical function vulnerability. This vulnerability could allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by setting a new administrative password. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. Added to CISA KEV on 2025-09-02.
TP-Link TL-WA855REClosed Sep 2, 2025
- ClosedPatched
Meta Platforms WhatsApp: WhatsApp Incorrect Authorization Vulnerability
Meta Platforms WhatsApp contains an incorrect authorization vulnerability due to an incomplete authorization of linked device synchronization messages. This vulnerability could allow an unrelated user to trigger processing of content from an arbitrary URL on a target’s device. Added to CISA KEV on 2025-09-02.
Meta Platforms WhatsAppClosed Sep 2, 2025
Updated
- ClosedHighNo fix needed
Salesloft Drift OAuth tokens used to raid 700+ companies' Salesforce data (UNC6395)
Between August 8 and 18, 2025, UNC6395 used stolen OAuth tokens for the Salesloft Drift chatbot integration to bulk-export data from customers' Salesforce instances, hunting for AWS keys, Snowflake tokens, passwords and VPN credentials. Cloudflare, Palo Alto Networks, Zscaler and many others disclosed exposure. Salesforce pulled Drift from AppExchange.
Salesloft Drift integration (Salesforce, Google Workspace)Closed Sep 7, 2025
