Vulnerabilities are weaknesses or flaws in systems, software, hardware, configurations, or processes that adversaries can exploit to compromise confidentiality, integrity, or availability. The concept underpins vulnerability management, regulatory compliance, risk assessment, and security investment decisions across enterprise IT, cloud, and operational technology environments.
623 articles about Vulnerabilities
Decision Insights Threat Desk • November 28, 2025
CISA added CVE-2025-64446, a Fortinet FortiWeb path traversal flaw, to its Known Exploited Vulnerabilities Catalog amid active exploitation.
Decision Insights Threat Desk • November 27, 2025
CISA issued four advisories on vulnerabilities in industrial control systems including Advantech DeviceOn iEdge and ABB FLXeon Controllers.
Decision Insights Threat Desk • November 27, 2025
CISA updates Akira ransomware advisory outlining new attack methods and defensive patching recommendations.
Decision Insights Threat Desk • November 27, 2025
CISA issued 18 advisories detailing vulnerabilities across multiple Industrial Control Systems products from various vendors.
Decision Insights Threat Desk • November 27, 2025
CISA published six advisories on vulnerabilities in multiple Industrial Control Systems products, prompting review for mitigation.
Decision Insights Threat Desk • November 27, 2025
Tenda N300 and 4G03 Pro routers have command injection flaws enabling root access; no patches currently exist.
Decision Insights Threat Desk • November 27, 2025
AVEVA found an XSS flaw in Application Server IDE up to 2023 R2 SP1 P02; updates to 2023 R2 SP1 P03 address the issue.
Decision Insights Threat Desk • November 27, 2025
A vulnerability classified under CVE-2025-10259 affects Mitsubishi Electric's MELSEC iQ-F Series, causing potential denial of service via improper validation in TCP communication. The issue impacts various versions worldwide, with mitigation advice including VPN use and restricted physical and network access.
Decision Insights Threat Desk • November 27, 2025
AVEVA Edge 2023 R2 and prior contain a cryptographic flaw allowing local attackers with file access to brute force passwords.
Decision Insights Threat Desk • November 27, 2025
A vulnerability in Opto 22's GRV-EPIC and groov RIO devices allows remote command execution with root privileges. Affected firmware versions are prior to 4.0.3. A patch is available, and CISA recommends network security measures.
Decision Insights Threat Desk • November 27, 2025
A vulnerability in Siemens TIA-Portal software used in Festo Didactic products allows potential arbitrary file creation or overwriting and code execution. Users are advised to update affected software versions and apply recommended cybersecurity practices to mitigate social engineering risks.
Decision Insights Threat Desk • November 27, 2025
A vulnerability affecting Festo's MSE6-C2M/D2M/E2M product family has been identified, involving hidden functions in undocumented test mode exploitable remotely by authenticated, low-privilege attackers. Mitigation includes updated documentation and network defense measures, with no public exploitation reported.