Decision Insights Threat Desk

CISA has issued five advisories regarding vulnerabilities in various Industrial Control Systems, including Fuji Electric and Delta Electronics.

Hiawatha, an open-source web server, has multiple vulnerabilities affecting versions 8.5 to 11.7, requiring updated releases for remediation.

The Amp’ed RF BT-AP 111 Bluetooth Access Point allows unauthenticated remote access, posing a security risk to users.

Two security vulnerabilities in Sunshine for Windows could allow attackers to execute arbitrary code and escalate privileges.

LangChainGo's CVE-2025-9556 vulnerability allows arbitrary file read via the Gonja template engine, enabling SSTI attacks.

Lectora software versions 21.0–21.3 and 7.1.6 and older had an XSS vulnerability. A patch in version 21.4 requires republishing courses.