Feb 27, 2025 Cyber Threat Intelligence

Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.

Daily summary

  • 10 new critical disclosures — review patch status on exposed services.

Top threats today

Three highest-priority changes — analyst brief, not a CVE dump.

Critical exposure

CVE-2025-1744 Radare2 Buffer Overflow

  • CVSS 10

New critical Radare2 Buffer Overflow (CVSS 10) — fresh disclosure window; early internet scanning often precedes mature exploit chains.

Critical exposure

CVE-2024-36046 Infoblox NIOS through 8.6.4 executes with more privileges than required.

  • CVSS 9.8
  • Potential privilege escalation to admin/root

New critical Infoblox Nios privilege escalation (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.

Critical exposure

CVE-2024-38292 Extremenetworks Xiq-se Path Traversal

  • CVSS 9.8

New critical Extremenetworks Xiq-se Path Traversal (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.

Active exploitation

CISA KEV — confirmed in-the-wild exploitation.

Nothing flagged in this category for this digest.

View KEV additions

Exploit & PoC activity

Nothing flagged in this category for this digest.

View new exploit links

Exploitation dynamics

Nothing flagged in this category for this digest.

See EPSS increases

New critical disclosures

CVE-2024-36046 CVSS 9.8

Infoblox NIOS through 8.6.4 executes with more privileges than required.

CVE-2024-36047 CVSS 9.8

Infoblox NIOS through 8.6.4 and 9.x through 9.0.3 has Improper Input Validation.

CVE-2024-37566 CVSS 9.8

Infoblox NIOS through 8.6.4 has Improper Authentication for Grids.

CVE-2024-37567 CVSS 9.1

Infoblox NIOS through 8.6.4 has Improper Access Control for Grids.

CVE-2024-38292 CVSS 9.8

In Extreme Networks XIQ-SE before 24.2.11, due to a missing access control check, a path traversal is possible, which may lead to privile...

CVE-2024-51139 CVSS 9.8

Buffer Overflow vulnerability in Vigor2620/LTE200 3.9.8.9 and earlier and Vigor2860/2925 3.9.8 and earlier and Vigor2862/2926 3.9.9.5 and...

CVE-2024-55160 CVSS 9.8

GFast between v2 to v3.2 was discovered to contain a SQL injection vulnerability via the OrderBy parameter at /system/operLog/list.

CVE-2025-1744 CVSS 10

Out-of-bounds Write vulnerability in radareorg radare2 allows heap-based buffer over-read or buffer overflow.This issue affects radare2:...

CVE-2025-25570 CVSS 9.8

Vue Vben Admin 2.10.1 allows unauthorized login to the backend due to an issue with hardcoded credentials.

CVE-2025-26325 CVSS 9.8

ShopXO 6.4.0 is vulnerable to File Upload in ThemeDataService.php.

View critical disclosures

cvelogic Threat Intelligence