Oct 15, 2025
1 new incident, 1 with updates.
Started
- ClosedPatched
Adobe Experience Manager (AEM) Forms: Experience Manager Forms Code Execution Vulnerability
Adobe Experience Manager Forms in JEE contains an unspecified vulnerability that allows for arbitrary code execution. Added to CISA KEV on 2025-10-15.
Adobe Experience Manager (AEM) FormsClosed Oct 15, 2025
Updated
- ClosedPatched
F5 breached by nation-state actor: BIG-IP source code and undisclosed bugs stolen
F5 disclosed that a sophisticated nation-state actor had long-term access to its BIG-IP development and engineering systems and stole parts of the BIG-IP source code, information on undisclosed vulnerabilities and some customer configuration data. CISA issued Emergency Directive 26-01 ordering agencies to inventory and patch F5 gear. Researchers linked it to China-nexus UNC5221 and BRICKSTORM.
F5 BIG-IP (vendor breach)Closed Oct 15, 2025
