Sep 11, 2025 Cyber Threat Intelligence

Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.

Daily summary

  • Dassault Systèmes DELMIA Apriso added to CISA KEV — confirmed in-the-wild exploitation.
  • 10 new critical disclosures — review patch status on exposed services.

Top threats today

Three highest-priority changes — analyst brief, not a CVE dump.

Critical active threat

CVE-2025-5086 Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data

  • Actively exploited (CISA KEV)
  • Listed on CISA KEV
  • Remote code execution exposure

Dassault Systèmes DELMIA Apriso RCE is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.

Critical exposure

CVE-2025-58321 Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability.

  • CVSS 10

New critical Deltaww Dialink Directory Traversal (CVSS 10) — fresh disclosure window; early internet scanning often precedes mature exploit chains.

Critical exposure

CVE-2025-27466 Xen

  • CVSS 9.8

New critical disclosure (CVSS 9.8) — high severity with a short public awareness window before exploit material typically surfaces.

Active exploitation

CISA KEV — confirmed in-the-wild exploitation.

Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data

View KEV additions

Exploit & PoC activity

Nothing flagged in this category for this digest.

View new exploit links

Exploitation dynamics

Nothing flagged in this category for this digest.

See EPSS increases

New critical disclosures

CVE-2025-27466 CVSS 9.8

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There ar...

CVE-2025-40687 CVSS 9.3

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul.

CVE-2025-40689 CVSS 9.3

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul.

CVE-2025-40690 CVSS 9.3

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul.

CVE-2025-40691 CVSS 9.3

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul.

CVE-2025-40692 CVSS 9.3

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul.

CVE-2025-58142 CVSS 9.8

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There ar...

CVE-2025-58143 CVSS 9.8

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There ar...

CVE-2025-58321 CVSS 10

Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability.

CVE-2025-59053 CVSS 9.6

AIRI is a self-hosted, artificial intelligence based Grok Companion.

View critical disclosures

cvelogic Threat Intelligence