THE INTERNET IS THINKING
Earlier sources: Security
Digital security protects systems, software, accounts, and information from misuse. Explore cybersecurity, vulnerabilities, threat intelligence, cryptography, privacy, and identity, with links to the underlying advisories and research.
SYMTRI organizes observations from public sources into a living map. Connections reflect shared subject matter; they do not establish causation or endorse a source.
Open in the map ↗696 classified signals in the fourteen-day window. Recent momentum: steady. These counts include signals awaiting readable evidence.
Earlier sources
Up to ten sources with readable evidence, ordered by their feed timestamp. These archive sources can be older than the live fourteen-day window. This list is a sample, not a measure of total activity. Dates distinguish paper publication, repository creation, model/dataset activity, Hacker News posts, and KEV catalog additions. “First archived” records when SYMTRI first stored the signal.
- CISA · Added to KEV · First archived
CVE-2025-61757: Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability ↗
Oracle Fusion Middleware contains a missing authentication for critical function vulnerability, allowing unauthenticated remote attackers to take over Identity Manager. Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2025-11-21 (not the first disclosure date). Action due date: 2025-12-12.
- CISA · Added to KEV · First archived
CVE-2025-13223: Google Chromium V8 Type Confusion Vulnerability ↗
Google Chromium V8 contains a type confusion vulnerability that allows for heap corruption. Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2025-11-19 (not the first disclosure date). Action due date: 2025-12-10.
- CISA · Added to KEV · First archived
CVE-2025-58034: Fortinet FortiWeb OS Command Injection Vulnerability ↗
Fortinet FortiWeb contains an OS command Injection vulnerability that may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands. Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2025-11-18 (not the first disclosure date). Action due date: 2025-11-25.
- CISA · Added to KEV · First archived
CVE-2025-64446: Fortinet FortiWeb Path Traversal Vulnerability ↗
Fortinet FortiWeb contains a relative path traversal vulnerability that may allow an unauthenticated attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests. Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2025-11-14 (not the first disclosure date). Action due date: 2025-11-21.
- CISA · Added to KEV · First archived
CVE-2025-9242: WatchGuard Firebox Out-of-Bounds Write Vulnerability ↗
WatchGuard Firebox contains an out-of-bounds write vulnerability in the OS iked process that may allow a remote unauthenticated attacker to execute arbitrary code. Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2025-11-12 (not the first disclosure date). Action due date: 2025-12-03.
- CISA · Added to KEV · First archived
CVE-2025-62215: Microsoft Windows Race Condition Vulnerability ↗
Microsoft Windows Kernel contains a race condition vulnerability that allows a local attacker with low-level privileges to escalate privileges. Successful exploitation of this vulnerability could enable the attacker to gain SYSTEM-level access. Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2025-11-12 (not the first disclosure date). Action due date: 2025-12-03.
- CISA · Added to KEV · First archived
CVE-2025-12480: Gladinet Triofox Improper Access Control Vulnerability ↗
Gladinet Triofox contains an improper access control vulnerability that allows access to initial setup pages even after setup is complete. Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2025-11-12 (not the first disclosure date). Action due date: 2025-12-03.
- CISA · Added to KEV · First archived
CVE-2025-21042: Samsung Mobile Devices Out-of-Bounds Write Vulnerability ↗
Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so. This vulnerability could allow remote attackers to execute arbitrary code. Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2025-11-10 (not the first disclosure date). Action due date: 2025-12-01.
- CISA · Added to KEV · First archived
CVE-2025-48703: CWP Control Web Panel OS Command Injection Vulnerability ↗
CWP Control Web Panel (formerly CentOS Web Panel) contains an OS command Injection vulnerability that allows unauthenticated remote code execution via shell metacharacters in the t_total parameter in a filemanager changePerm request. A valid non-root username must be known. Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2025-11-04 (not the first disclosure date). Action due date: 2025-11-25.
- CISA · Added to KEV · First archived
CVE-2025-11371: Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability ↗
Gladinet CentreStack and Triofox contains a files or directories accessible to external parties vulnerability that allows unintended disclosure of system files. Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2025-11-04 (not the first disclosure date). Action due date: 2025-11-25.
Live window recorded . This is the ingestion observation time, not the publication or discovery date of each source.
How to assess evidence about Security
Check each original source for its methods, release status, limitations, and supporting data. A repository announcement, a preprint, and a published study provide different kinds of evidence. SYMTRI’s subject classification helps discovery; it does not independently validate the source’s claims.
See the collection and counting methodology ↗ · Read the weekly synthesis ↗
Follow a thread
Explore related regions
These navigation suggestions are part of the map’s editorial structure, rather than measured evidence of a connection.