Dec 17, 2025
3 new incidents, 0 with updates.
Started
- ClosedCriticalPatched
ASUS Live Update: Live Update Embedded Malicious Code Vulnerability
ASUS Live Update contains an embedded malicious code vulnerability client were distributed with unauthorized modifications introduced through a supply chain compromise. The modified builds could cause devices meeting specific targeting conditions to perform unintended actions. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. Added to CISA KEV on 2025-12-17.
ASUS Live UpdateClosed Dec 17, 2025
- ClosedCriticalPatched
Cisco Multiple Products: Multiple Products Improper Input Validation Vulnerability
Cisco Secure Email Gateway, Secure Email, AsyncOS Software, and Web Manager appliances contains an improper input validation vulnerability that allows threat actors to execute arbitrary commands with root privileges on the underlying operating system of an affected appliance. Added to CISA KEV on 2025-12-17.
Cisco Multiple ProductsClosed Dec 17, 2025
- ClosedMediumPatched
SonicWall SMA1000 appliance: SMA1000 Missing Authorization Vulnerability
SonicWall SMA1000 contains a missing authorization vulnerability that could allow for privilege escalation appliance management console (AMC) of affected devices. Added to CISA KEV on 2025-12-17.
SonicWall SMA1000 applianceClosed Dec 17, 2025
