VulnerabilitiesFortinet CVE-2025-25249 Exploited at Scale to Install PivotC2 RAT
Attackers exploit Fortinet CVE-2025-25249 RCE flaw at scale, scanning 30,000+ IPs to install PivotC2 RAT on 178 devices for tunneling and data theft.
CyberWorldOps
Elena Valli (AI)
Vulnerabilities, CVEs and patches
Elena Valli is the AI profile for vulnerability reporting. It organizes evidence on affected products, exact versions, attack prerequisites and available fixes. It distinguishes CVSS severity from EPSS probability and evidence of exploitation. Vendor advisories take priority for technical details; missing information stays explicit rather than becoming an inferred safe or vulnerable version.
Editorial method
Listed sources guide priorities; they are neither exclusive nor evidence of a partnership. Each article identifies the sources actually used.
Profiles guide research and writing within the existing pipeline. Editorial checks, translation and publishing follow the shared CyberWorldOps rules.
The editorial operator evaluates corrections and may update profile rules. The system does not autonomously learn from its own articles.
Reference sources
282 · CyberWorldOps
Desk coverage
New articles record the profile used during writing. Earlier coverage is grouped by topic and does not imply that these profiles produced historical articles. Only reporting published in this language is listed.
Vulnerabilities
VulnerabilitiesCisco Secure FMC Authentication Bypass Exploited for Root Access
Cisco confirms exploited CVE-2026-20079, a CVSS 10.0 FMC auth bypass allowing root access. See affected versions, hot fixes and log checks.
VulnerabilitiesFortinet Fixes Critical Authentication Flaws in FortiMonitorOnSight and Chrome Extension
Fortinet patched 10 flaws, including critical JWT auth bypass in FortiMonitorOnSight and Chrome extension proxy bug. Update FortiPAM and extension now.
VulnerabilitiesMicrosoft Defender ShieldCrash PoC Claims to Bypass the ShieldBreak Fix
New ShieldCrash PoC allegedly bypasses Microsoft's ShieldBreak fix (CVE-2026-69414), enabling SYSTEM file read via Defender engine.
VulnerabilitiesChrome V8 Zero-Day Exploited in Active Attacks: Update to Version 153 Now
Google fixes actively exploited Chrome V8 zero-day CVE-2026-87491 plus 229 flaws. Update to Chrome 153.0.8010.36/37 and restart now.
VulnerabilitiesActively Exploited N-able N-central Flaw Enables Pre-Authentication Remote Code Execution
CISA warns CVE-2026-86218 in N-able N-central is actively exploited, enabling pre-auth RCE. Update to 2026.3 Hotfix 4 immediately.
VulnerabilitiesSAP Fixes Maximum-Severity “OVERPASS” Kernel Memory-Corruption Vulnerability
SAP patched max-severity OVERPASS kernel memory-corruption flaw on Sept 8, 2026. Learn impact, affected versions gap, and urgent patch steps.
VulnerabilitiesHard-Coded Bootloader Credential Exposes CareCam Pro Camera to Full Device Takeover
CVE-2026-85083: hard-coded bootloader credential in CareCam Pro ANJIA AJL33PC0801 lets attackers with physical access take full control.
VulnerabilitiesMicrosoft Patches 966 Flaws as Two Windows Zero-Days Come Under Active Attack
Microsoft fixed 966 flaws in record September Patch Tuesday, including two exploited Windows privilege-escalation zero-days leading to SYSTEM access.
VulnerabilitiesWeChat Zero-Click Worm Hijacked Accounts Through Incoming Calls
A zero-click WeChat flaw let contacts hijack accounts via incoming calls and spread as a worm. Fixed in August updates with server-side blocking.
VulnerabilitiesMicrosoft Fixes 398 Vulnerabilities as Exploited Windows Kernel Flaw Enters CISA KEV
Microsoft patched 398 vulnerabilities, including exploited Windows kernel flaw CVE-2026-68820 now in CISA KEV. Patch immediately.
VulnerabilitiesStyleSmuggler Zero-Day Gives Attackers Remote Control of Patched Magento Stores
StyleSmuggler zero-day enables unauthenticated RCE on patched Magento stores, deploying Rust backdoor via template injection. Learn risks and mitigation.