Oct 2, 2025
5 new incidents, 1 with updates.
Started
- ClosedPatched
Jenkins: Remote Code Execution Vulnerability
Jenkins contains a remote code execution vulnerability. This vulnerability that could allowed attackers to transfer a serialized Java SignedObject object to the remoting-based Jenkins CLI, that would be deserialized using a new ObjectInputStream, bypassing the existing blocklist-based protection mechanism. Added to CISA KEV on 2025-10-02.
JenkinsClosed Oct 2, 2025
- ClosedPatched
Juniper ScreenOS: ScreenOS Improper Authentication Vulnerability
Juniper ScreenOS contains an improper authentication vulnerability that could allow unauthorized remote administrative access to the device. Added to CISA KEV on 2025-10-02.
Juniper ScreenOSClosed Oct 2, 2025
- ClosedPatched
GNU Bash: Bash OS Command Injection Vulnerability
GNU Bash contains an OS command injection vulnerability which allows remote attackers to execute arbitrary commands via a crafted environment. Added to CISA KEV on 2025-10-02.
GNU BashClosed Oct 2, 2025
- ClosedPatched
Samsung Mobile Devices: Mobile Devices Out-of-Bounds Write Vulnerability
Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so which allows remote attackers to execute arbitrary code. Added to CISA KEV on 2025-10-02.
Samsung Mobile DevicesClosed Oct 2, 2025
- ClosedPatched
Smartbedded Meteobridge: Meteobridge Command Injection Vulnerability
Smartbedded Meteobridge contains a command injection vulnerability that could allow remote unauthenticated attackers to gain arbitrary command execution with elevated privileges (root) on affected devices. Added to CISA KEV on 2025-10-02.
Smartbedded MeteobridgeClosed Oct 2, 2025
Updated
- ClosedHighNo fix needed
Red Hat Consulting GitLab breached: ~800 customer engagement reports stolen
The Crimson Collective broke into a self-managed GitLab instance used by Red Hat Consulting and claimed about 570 GB from 28,000 repos, including roughly 800 Customer Engagement Reports with infrastructure, config and credential details. Red Hat confirmed the access and said its products, supply chain and hosted services were not affected. ShinyHunters later joined the extortion.
Red Hat Consulting self-managed GitLabClosed Oct 10, 2025
