Home / 2025 Advisories Archive

2025 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	23 Feb 2025	11 Jan 2026	CPAI-2024-4975		CVE-2024-34200 CVE-2024-34201 CVE-2024-34202 CVE-2024-34203 CVE-2024-34207 CVE-2024-34209 CVE-2024-34212 CVE-2024-34213 CVE-2024-34215 CVE-2024-34217 CVE-2024-7465	TOTOLINK CP450 Buffer Overflow (CVE-2024-34200; CVE-2024-34201; CVE-2024-34202; CVE-2024-34203; CVE-2024-34207; CVE-2024-34209; CVE-2024-34212; CVE-2024-34213; CVE-2024-34215; CVE-2024-34217; CVE-2024-7465)
Critical	21 Dec 2025	8 Jan 2026	CPAI-2025-10549		CVE-2025-37164	HPE OneView Remote Code Execution (CVE-2025-37164)
Critical	11 Aug 2025	8 Jan 2026	CPAI-2025-10501		CVE-2023-38939 CVE-2024-30584 CVE-2024-30586 CVE-2024-30588 CVE-2024-30590 CVE-2024-32315 CVE-2025-7527 CVE-2025-7530 CVE-2025-7531 CVE-2025-7532 CVE-2025-7548 CVE-2025-7549 CVE-2025-7550 CVE-2025-7551	Tenda FH1202 Buffer Overflow (CVE-2023-38939; CVE-2024-30584; CVE-2024-30586; CVE-2024-30588; CVE-2024-30590; CVE-2024-32315; CVE-2025-7527; CVE-2025-7530; CVE-2025-7531; CVE-2025-7532; CVE-2025-7548; CVE-2025-7549; CVE-2025-7550; CVE-2025-7551)
High	9 Jun 2025	7 Jan 2026	CPAI-2025-10478		CVE-2025-44176 CVE-2025-7792 CVE-2025-7793 CVE-2025-7794 CVE-2025-7795 CVE-2025-7796 CVE-2025-7805 CVE-2025-7806	Tenda FH451 Buffer Overflow (CVE-2025-44176; CVE-2025-7792; CVE-2025-7793; CVE-2025-7794; CVE-2025-7795; CVE-2025-7796; CVE-2025-7805; CVE-2025-7806)
Medium	30 Dec 2025	6 Jan 2026	CPAI-2024-4698		CVE-2024-5936	PrivateGPT Open Redirect (CVE-2024-5936)
High	10 Dec 2025	6 Jan 2026	CPAI-2024-4741		CVE-2023-38925 CVE-2024-50994 CVE-2024-50995 CVE-2024-50996 CVE-2024-50997 CVE-2024-51007 CVE-2024-51011 CVE-2024-51014 CVE-2024-52017 CVE-2024-52023 CVE-2024-52024 CVE-2024-52025 CVE-2024-52026	Netgear Multiple Products Buffer Overflow (CVE-2023-38925; CVE-2024-50994; CVE-2024-50995; CVE-2024-50996; CVE-2024-50997; CVE-2024-51007; CVE-2024-51011; CVE-2024-51014; CVE-2024-52017; CVE-2024-52023; CVE-2024-52024; CVE-2024-52025; CVE-2024-52026)
Critical	8 Sep 2025	6 Jan 2026	CPAI-2025-5950		CVE-2025-11117 CVE-2025-11418 CVE-2025-11423 CVE-2025-12232 CVE-2025-12233 CVE-2025-12234 CVE-2025-12235 CVE-2025-12236 CVE-2025-8180 CVE-2025-9006 CVE-2025-9007 CVE-2025-9443 CVE-2025-9748	Tenda CH22 Buffer Overflow (CVE-2025-11117; CVE-2025-11418; CVE-2025-11423; CVE-2025-12232; CVE-2025-12233; CVE-2025-12234; CVE-2025-12235; CVE-2025-12236; CVE-2025-8180; CVE-2025-9006; CVE-2025-9007; CVE-2025-9443; CVE-2025-9748)
High	13 Jul 2025	6 Jan 2026	CPAI-2025-10406		CVE-2025-48703	CentOS Web Panel Command Injection (CVE-2025-48703)
High	27 Jul 2025	5 Jan 2026	CPAI-2025-10362		CVE-2025-28023 CVE-2025-28025 CVE-2025-28026 CVE-2025-28027 CVE-2025-28028 CVE-2025-28029 CVE-2025-28032 CVE-2025-28033	TOTOLINK Multiple Routers Buffer Overflow (CVE-2025-28023; CVE-2025-28025; CVE-2025-28026; CVE-2025-28027; CVE-2025-28028; CVE-2025-28029; CVE-2025-28032; CVE-2025-28033)
High	30 Dec 2025	5 Jan 2026	CPAI-2025-10270		CVE-2025-68664 CVE-2025-68665	LangChain Insecure Deserialization (CVE-2025-68664; CVE-2025-68665)
High	13 Nov 2025	5 Jan 2026	CPAI-2025-4394		CVE-2025-11749	WordPress AI Engine Plugin Information Disclosure (CVE-2025-11749)
High	20 Aug 2025	5 Jan 2026	CPAI-2025-10363		CVE-2025-14133 CVE-2025-14134 CVE-2025-14135 CVE-2025-6752 CVE-2025-8816 CVE-2025-8817 CVE-2025-8819 CVE-2025-8820 CVE-2025-8822 CVE-2025-8824 CVE-2025-8826 CVE-2025-8831 CVE-2025-8832 CVE-2025-8833	Linksys Multiple Products Stack Overflow (CVE-2025-14133; CVE-2025-14134; CVE-2025-14135; CVE-2025-6752; CVE-2025-8816; CVE-2025-8817; CVE-2025-8819; CVE-2025-8820; CVE-2025-8822; CVE-2025-8824; CVE-2025-8826; CVE-2025-8831; CVE-2025-8832; CVE-2025-8833)
Critical	19 May 2025	5 Jan 2026	CPAI-2024-4597		CVE-2024-11047 CVE-2024-11048 CVE-2024-52754 CVE-2024-52755 CVE-2024-52757	D-Link DI-8003 Buffer Overflow (CVE-2024-11047; CVE-2024-11048; CVE-2024-52754; CVE-2024-52755; CVE-2024-52757)
Critical	9 Apr 2025	5 Jan 2026	CPAI-2024-1545		CVE-2024-5753 CVE-2024-5827	Vanna.AI SQL Injection (CVE-2024-5753; CVE-2024-5827)
High	10 Dec 2025	4 Jan 2026	CPAI-2024-4583		CVE-2023-38925 CVE-2024-51007 CVE-2024-51011 CVE-2024-51014 CVE-2024-52017 CVE-2024-52023 CVE-2024-52024 CVE-2024-52025 CVE-2024-52026	Netgear Multiple Products Buffer Overflow (CVE-2023-38925; CVE-2024-51007; CVE-2024-51011; CVE-2024-51014; CVE-2024-52017; CVE-2024-52023; CVE-2024-52024; CVE-2024-52025; CVE-2024-52026)
High	10 Mar 2025	1 Jan 2026	CPAI-2025-9977		CVE-2024-9284 CVE-2025-25897 CVE-2025-25898 CVE-2025-25899 CVE-2025-25900 CVE-2025-25901	TP-Link TL-WR841ND Buffer Overflow (CVE-2024-9284; CVE-2025-25897; CVE-2025-25898; CVE-2025-25899; CVE-2025-25900; CVE-2025-25901)
High	31 Dec 2025	31 Dec 2025	CPAI-2025-9860		CVE-2025-47646	WordPress PSW Front-end Login and Registration Plugin Authentication Bypass (CVE-2025-47646)
High	31 Dec 2025	31 Dec 2025	CPAI-2023-3106		CVE-2023-40289	Supermicro Multiple Products Command Injection (CVE-2023-40289)
Critical	31 Dec 2025	31 Dec 2025	CPAI-2025-9845		CVE-2025-54068	Laravel Livewire Remote Code Execution (CVE-2025-54068)
High	31 Dec 2025	31 Dec 2025	CPAI-2025-9834		CVE-2025-52692	Linksys E9450-SG Authentication Bypass (CVE-2025-52692)
High	16 Oct 2025	31 Dec 2025	CPAI-2025-7767	Microsoft CVE-2025-59287	CVE-2025-59287	Microsoft Windows Server Update Service Insecure Deserialization (CVE-2025-59287)
High	30 Dec 2025	30 Dec 2025	CPAI-2025-9776		CVE-2025-68664	LangChain Insecure Deserialization (CVE-2025-68664)
Medium	30 Dec 2025	30 Dec 2025	CPAI-2024-4310		CVE-2024-5936	PrivateGPT Open Redirect (CVE-2024-5936)
High	30 Dec 2025	30 Dec 2025	CPAI-2025-9770		CVE-2025-14847	MongoDB Information Disclosure (CVE-2025-14847)
Critical	7 Jan 2025	30 Dec 2025	CPAI-2025-9821		CVE-2024-40725 CVE-2025-55315	HTTP Requests Smuggling (CVE-2024-40725; CVE-2025-55315)
High	30 Dec 2025	30 Dec 2025	CPAI-2024-4296		CVE-2024-48416 CVE-2024-48420	Edimax AC1200 Buffer Overflow (CVE-2024-48416; CVE-2024-48420)
Critical	30 Dec 2025	30 Dec 2025	CPAI-2024-4287		CVE-2024-7578 CVE-2024-7579 CVE-2024-7580	Alien Technology ALR-F800 Command Injection (CVE-2024-7578; CVE-2024-7579; CVE-2024-7580)
High	30 Dec 2025	30 Dec 2025	CPAI-2024-4289		CVE-2024-57725	Arcadyan LiveBox Fibra PRV3399B_B_LT Authentication Bypass (CVE-2024-57725)
Critical	30 Dec 2025	30 Dec 2025	CPAI-2024-4254		CVE-2024-7467 CVE-2024-7468 CVE-2024-7469 CVE-2024-7470	Raisecom Multiple Products Command Injection (CVE-2024-7467; CVE-2024-7468; CVE-2024-7469; CVE-2024-7470)
High	30 Dec 2025	30 Dec 2025	CPAI-2024-4320		CVE-2024-22545 CVE-2024-22546	TRENDnet TEW Command Injection (CVE-2024-22545; CVE-2024-22546)
High	30 Dec 2025	30 Dec 2025	CPAI-2024-4293		CVE-2024-50330	Ivanti Endpoint Manager SQL Injection (CVE-2024-50330)
Critical	21 Dec 2025	29 Dec 2025	CPAI-2025-9239		CVE-2025-37164	HPE OneView Remote Code Execution (CVE-2025-37164)
Critical	29 Dec 2025	29 Dec 2025	CPAI-2025-9685		CVE-2025-13189 CVE-2025-13190 CVE-2025-13191	D-Link DIR-816L Buffer Overflow (CVE-2025-13189; CVE-2025-13190; CVE-2025-13191)
Critical	29 Dec 2025	29 Dec 2025	CPAI-2025-9674		CVE-2024-48825 CVE-2024-48826 CVE-2025-1819	Tenda AC7 Command Injection (CVE-2024-48825; CVE-2024-48826; CVE-2025-1819)
High	29 Dec 2025	29 Dec 2025	CPAI-2025-9480		CVE-2025-25231	Omnissa Workspace ONE UEM Directory Traversal (CVE-2025-25231)
High	29 Dec 2025	29 Dec 2025	CPAI-2024-4207		CVE-2024-53945	KuWFi AC900 Command Injection (CVE-2024-53945)
High	29 Dec 2025	29 Dec 2025	CPAI-2024-4188		CVE-2024-9977	MitraStar GPT-2541GNAC Command Injection (CVE-2024-9977)
High	29 Dec 2025	29 Dec 2025	CPAI-2025-9698		CVE-2025-66387	Orkes Conductor SQL Injection (CVE-2025-66387)
High	29 Dec 2025	29 Dec 2025	CPAI-2025-9700		CVE-2025-14269	Headlamp Information Disclosure (CVE-2025-14269)
Critical	29 Dec 2025	29 Dec 2025	CPAI-2024-4213		CVE-2024-9793	Tenda AC1206 Command Injection (CVE-2024-9793)
High	28 Dec 2025	28 Dec 2025	CPAI-2025-9552		CVE-2025-68613	n8n Remote Code Execution (CVE-2025-68613)
Critical	12 Feb 2025	28 Dec 2025	CPAI-2024-4126		CVE-2022-45506 CVE-2023-49403 CVE-2023-49406 CVE-2023-49999 CVE-2024-32292 CVE-2024-3880	Tenda W30E Command Injection (CVE-2022-45506; CVE-2023-49403; CVE-2023-49406; CVE-2023-49999; CVE-2024-32292; CVE-2024-3880)
High	28 Dec 2025	28 Dec 2025	CPAI-2025-9557		CVE-2025-60787	MotionEye Command Injection (CVE-2025-60787)
High	28 Dec 2025	28 Dec 2025	CPAI-2025-9337		CVE-2025-9428	Zohocorp ManageEngine Analytics Plus SQL Injection (CVE-2025-9428)
High	28 Dec 2025	28 Dec 2025	CPAI-2025-9537		CVE-2025-13306	D-Link Multiple Products Command Injection (CVE-2025-13306)
High	28 Dec 2025	28 Dec 2025	CPAI-2025-9527		CVE-2025-57569 CVE-2025-57570 CVE-2025-57571 CVE-2025-57572 CVE-2025-57573	Tenda F3 Buffer Overflow (CVE-2025-57569; CVE-2025-57570; CVE-2025-57571; CVE-2025-57572; CVE-2025-57573)
High	28 Dec 2025	28 Dec 2025	CPAI-2025-9342		CVE-2025-2005	WordPress Front End Users Plugin Arbitrary File Upload (CVE-2025-2005)
High	28 Dec 2025	28 Dec 2025	CPAI-2018-3177		CVE-2018-5371	D-Link DSL-2540U and DSL-2640U Command Injection (CVE-2018-5371)
High	28 Dec 2025	28 Dec 2025	CPAI-2024-2928		CVE-2024-48634	D-Link DIR-882 Command Injection (CVE-2024-48634)
Critical	28 Dec 2025	28 Dec 2025	CPAI-2024-2926		CVE-2024-7828	D-Link Multiple Products Buffer Overflow (CVE-2024-7828)