Vulnerabilities are weaknesses or flaws in systems, software, hardware, configurations, or processes that adversaries can exploit to compromise confidentiality, integrity, or availability. The concept underpins vulnerability management, regulatory compliance, risk assessment, and security investment decisions across enterprise IT, cloud, and operational technology environments.
635 articles about Vulnerabilities
Decision Insights Threat Desk • November 18, 2025
CISA adds CVE-2021-43798, a Grafana Path Traversal Vulnerability, to its Known Exploited Vulnerabilities Catalog due to active exploitation evidence.
Decision Insights Threat Desk • November 18, 2025
CISA issued four advisories on October 9, 2025, addressing vulnerabilities and security issues in various Industrial Control Systems.
Decision Insights Threat Desk • November 18, 2025
CISA added five vulnerabilities to its Known Exploited Vulnerabilities Catalog, including Microsoft and IGEL flaws. CVE-2025-6264 was removed.
Decision Insights Threat Desk • November 18, 2025
CISA has added a new vulnerability, CVE-2025-54253, to its Known Exploited Vulnerabilities Catalog based on active exploitation evidence.
Decision Insights Threat Desk • November 18, 2025
CISA has issued thirteen advisories regarding Industrial Control Systems (ICS) on October 16, 2025, detailing various security vulnerabilities across multiple platforms, including products from Rockwell Automation, Siemens, Hitachi Energy, and Schneider Electric.
Decision Insights Threat Desk • November 18, 2025
CISA adds CVE-2025-54236 and CVE-2025-59287 to its Known Exploited Vulnerabilities Catalog due to active exploitation evidence.
Decision Insights Threat Desk • November 18, 2025
CISA updated its guidance on a critical vulnerability in Windows Server Update Service. Microsoft urges organizations to apply an out-of-band security update to prevent unauthorized remote code execution.
Decision Insights Threat Desk • November 18, 2025
CISA has added two vulnerabilities, CVE-2025-6204 and CVE-2025-6205, to its Known Exploited Vulnerabilities Catalog due to active exploitation evidence.
Decision Insights Threat Desk • November 18, 2025
CISA has published two advisories related to Industrial Control Systems, covering vulnerabilities and security issues.
Decision Insights Threat Desk • November 18, 2025
CISA has added two vulnerabilities to its KEV Catalog: CVE-2025-24893 for XWiki and CVE-2025-41244 for Broadcom VMware products.
Decision Insights Threat Desk • November 18, 2025
CISA has added CVE-2025-58034 to its Known Exploited Vulnerabilities Catalog amid active exploitation, urging organizations to act.
Decision Insights Threat Desk • November 18, 2025
A vulnerability affecting Shelly Pro 4PM smart switches (versions prior to v1.6) has been reported, allowing potential Denial of Service conditions due to memory overallocation. Users are advised to update their devices and follow CISA's mitigation recommendations.