Decision Insights Threat Desk

CISA has added CVE-2025-21042, an Out-of-Bounds Write Vulnerability in Samsung Mobile Devices, to its Known Exploited Vulnerabilities Catalog. Federal agencies are mandated to remediate such vulnerabilities to safeguard networks. CISA recommends all organizations prioritize timely remediation of these vulnerabilities.

CISA added CVE-2025-21042, a vulnerability in Samsung Mobile Devices, to its Known Exploited Vulnerabilities Catalog.

A vulnerability in the npm package expr-eval could allow attackers to execute arbitrary code through manipulated input.

CISA warns of vulnerability CVE-2025-64446 in Fortinet FortiWeb affecting multiple versions, allowing potential unauthorized access.

CISA has identified exploitation of CVE-2025-64446 in Fortinet's FortiWeb, affecting several versions. Organizations must upgrade or disable HTTP/HTTPS for exposed systems.

CISA has added CVE-2025-64446 to its Known Exploited Vulnerabilities Catalog, affecting Fortinet FortiWeb, and urges timely remediation.