Server

Commvault integrated Delinea Secret Server with Commvault Cloud to improve credential security and compliance for joint customers.

CISA added CVE-2025-55182, a remote code execution flaw in Meta React Server Components, to its Known Exploited Vulnerabilities Catalog.

CISA reports PRC state-sponsored actors using BRICKSTORM backdoor against VMware vSphere and Windows to maintain persistent access.

Mirion Medical NMIS BioDose versions prior to 23.0 have multiple vulnerabilities that can allow code execution and unauthorized access.

Sumo Logic expanded its Dojo AI with new agents to reduce alert fatigue and speed security investigations, now in beta.

Weekly roundup covering CISA exploited-vulnerability additions, industrial control system advisories, and 5G contract extensions.

AVEVA found an XSS flaw in Application Server IDE up to 2023 R2 SP1 P02; updates to 2023 R2 SP1 P03 address the issue.

Automated Logic's WebCTRL Premium Server vulnerabilities allow redirection and script attacks; fixed in version 9.0 with mitigation advice.

Aviz Networks' ONES 4.0 introduces a Rule Engine that detects configuration changes and NTP drift before they affect network performance.

CISA updates KEV Catalog with two new vulnerabilities affecting Adobe Commerce and Microsoft WSUS after active exploitation evidence.

Microsoft released an out-of-band security update to address a critical remote code execution vulnerability in Windows Server Update Service (WSUS) affecting multiple Windows Server versions. CISA advises organizations to identify vulnerable servers, apply the update, monitor for exploit activity, and use mitigations if updates cannot be applied immediately.

CISA and partners issued best practices to secure on-premises Microsoft Exchange servers and advise retiring outdated systems.