Feb 18, 2025 Cyber Threat Intelligence

Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.

Daily summary

  • Palo Alto Networks PAN-OS added to CISA KEV — confirmed in-the-wild exploitation.
  • 10 new critical disclosures — review patch status on exposed services.

Top threats today

Three highest-priority changes — analyst brief, not a CVE dump.

Critical active threat

CVE-2025-0108 Palo Alto Networks PAN-OS Authentication Bypass

  • Actively exploited (CISA KEV)
  • Listed on CISA KEV
  • Remote code execution exposure

Palo Alto Networks PAN-OS RCE is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.

Critical exposure

CVE-2025-26609 WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.

  • CVSS 10

New critical Wegia SQL Injection (CVSS 10) — fresh disclosure window; early internet scanning often precedes mature exploit chains.

Critical exposure

CVE-2025-26611 WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.

  • CVSS 10

New critical Wegia SQL Injection (CVSS 10) — fresh disclosure window; early internet scanning often precedes mature exploit chains.

Active exploitation

CISA KEV — confirmed in-the-wild exploitation.

CVE-2025-0108 KEV

Palo Alto Networks PAN-OS Authentication Bypass

View KEV additions

Exploit & PoC activity

Nothing flagged in this category for this digest.

View new exploit links

Exploitation dynamics

Nothing flagged in this category for this digest.

See EPSS increases

New critical disclosures

CVE-2025-25467 CVSS 9.8

Insufficient tracking and releasing of allocated used memory in libx264 git master allows attackers to execute arbitrary code via creatin...

CVE-2025-26609 CVSS 10

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.

CVE-2025-26610 CVSS 9.4

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.

CVE-2025-26611 CVSS 10

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.

CVE-2025-26612 CVSS 10

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.

CVE-2025-26613 CVSS 10

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.

CVE-2025-26614 CVSS 9.4

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.

CVE-2025-26615 CVSS 10

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.

CVE-2025-26616 CVSS 10

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.

CVE-2025-26617 CVSS 10

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.

View critical disclosures

cvelogic Threat Intelligence