$\"\"$ <\/a><\/div>\n

The U.S. Cybersecurity and Infrastructure Safety Company (CISA) on Thursday added<\/a> 4 safety flaws to its Identified Exploited Vulnerabilities (KEV<\/a>) catalog, citing proof of lively exploitation within the wild.<\/p>\n

The record of vulnerabilities is as follows –<\/p>\n

CVE-2025-68645<\/a><\/strong> (CVSS rating: 8.8) – A PHP distant file inclusion<\/a> vulnerability in Synacor Zimbra Collaboration Suite (ZCS) that might permit a distant attacker to craft requests to the “\/h\/relaxation” endpoint and permit inclusion of arbitrary information from the WebRoot listing with none authentication (Fastened in November 2025 with model 10.1.13<\/a>)<\/li>\n
CVE-2025-34026<\/a><\/strong> (CVSS rating: 9.2) – An authentication bypass<\/a> within the Versa Concerto SD-WAN orchestration platform that might permit an attacker to entry administrative endpoints (Fastened in April 2025 with model 12.2.1 GA<\/a>)<\/li>\n
CVE-2025-31125<\/a><\/strong> (CVSS rating: 5.3) – An improper entry management vulnerability in Vite Vitejs that might permit contents of arbitrary information to be returned to the browser utilizing ?inline&import or ?uncooked?import (Fastened in March 2025 with variations 6.2.4, 6.1.3, 6.0.13, 5.4.16, and 4.5.11<\/a>)<\/li>\n
CVE-2025-54313<\/a><\/strong> (CVSS rating: 7.5) – An embedded malicious code vulnerability in eslint-config-prettier that might permit for execution of a malicious DLL dubbed Scavenger Loader that is designed to ship an info stealer<\/li>\n<\/ul>\n
\n
$\"Cybersecurity\"$ <\/a><\/div>\n<\/div>\n
It is price noting that CVE-2025-54313 refers to a provide chain assault<\/a> focusing on eslint-config-prettier and 6 different npm packages, eslint-plugin-prettier, synckit, @pkgr\/core, napi-postinstall, got-fetch, and is, that got here to gentle in July 2025.<\/p>\n
The phishing marketing campaign focused the bundle maintainers with bogus hyperlinks that harvested their credentials underneath the pretext of verifying their e mail handle as a part of common account upkeep, permitting the menace actors to publish trojanized variations.<\/p>\n
In keeping with CrowdSec<\/a>, exploitation efforts focusing on CVE-2025-68645 have been ongoing since January 14, 2026. There are presently no particulars on how the opposite vulnerabilities are being exploited within the wild.<\/p>\n
Pursuant to Binding Operational Directive (BOD) 22-01, Federal Civilian Govt Department (FCEB) businesses are required to use the mandatory fixes by February 12, 2026, to safe their networks towards lively threats.<\/p>\n<\/div>\n\n","protected":false},"excerpt":{"rendered":"
\ue804Ravie Lakshmanan\ue802Jan 23, 2026Vulnerability \/ Software program Safety The U.S. Cybersecurity and Infrastructure Safety Company (CISA) on Thursday added 4 safety flaws to its Identified Exploited Vulnerabilities (KEV) catalog, citing proof of lively exploitation within the wild. The record of vulnerabilities is as follows – CVE-2025-68645 (CVSS rating: 8.8) – A PHP distant file inclusion […]<\/p>\n","protected":false},"author":2,"featured_media":11088,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[58],"tags":[1993,7526,1359,1994,4988,802,614,2721],"class_list":["post-11086","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-actively","tag-catalog","tag-cisa","tag-exploited","tag-kev","tag-software","tag-updates","tag-vulnerabilities"],"_links":{"self":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/11086","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=11086"}],"version-history":[{"count":1,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/11086\/revisions"}],"predecessor-version":[{"id":11087,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/11086\/revisions\/11087"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/media\/11088"}],"wp:attachment":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=11086"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=11086"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=11086"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}