Oct 24, 2025

Started

• Closed✓Patched

  Adobe Commerce and Magento: Commerce and Magento Improper Input Validation Vulnerability

  Adobe Commerce and Magento Open Source contain an improper input validation vulnerability that could allow an attacker to take over customer accounts through the Commerce REST API. Added to CISA KEV on 2025-10-24.

  Adobe Commerce and Magento·Closed Oct 24, 2025·updated Oct 24, 2025

• Closed✓Patched

  Microsoft Windows: Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability

  Microsoft Windows Server Update Service (WSUS) contains a deserialization of untrusted data vulnerability that allows for remote code execution. Added to CISA KEV on 2025-10-24.

  Microsoft Windows·Closed Oct 24, 2025·updated Oct 24, 2025