Tag: 2026-01-09

2 Attack Reports | 136 Vulnerabilities

Attack reports

CNCERT: Risk Warning Regarding the "Black Cat" Gang's Use of Search Engines to Spread Counterfeit Notepad++ Download Remote Control Backdoors

CNCERT and Microstep Online jointly detected a cyberattack campaign launched by the "Black Cat" criminal gang. This gang uses search engine SEO (Search Engine Optimization) techniques to push meticulously crafted phishing websites to the top of search engine keyword results. After visiting these hi…
backdoor
phishing
seo
2026-01-09
notepad
Published: January 9, 2026
Downloadable IOCs: 17

Threat Research: PHALT#BLYX: Fake BSODs and Trusted Build Tools

The PHALT#BLYX campaign targets the hospitality sector using sophisticated social engineering and advanced techniques. It begins with a phishing email mimicking a Booking.com reservation cancellation, leading victims to a fake website. Users are tricked into executing malicious PowerShell commands …
phishing
social engineering
asyncrat
dcrat
msbuild
process hollowing
2026-01-09
click-fix
Published: January 9, 2026
Downloadable IOCs: 20
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-70974

10.0
    Fastjson
  • Fastjson
Published: January 9, 2026

CVE-2025-64090

10.0
    *
  • *
Published: January 9, 2026

CVE-2025-64093

10.0
    *
  • *
Published: January 9, 2026

CVE-2025-69425

10.0
    Ruckus
  • Vriot Iot Controller
Published: January 9, 2026

CVE-2025-69426

10.0
    Ruckus
  • Vriot Iot Controller
Published: January 9, 2026

CVE-2025-14736

9.8
    Dynamiapps
  • Frontend Admin
Published: January 9, 2026

CVE-2025-14598

9.8
    Bees Software Solutions
  • Bet Portal
Published: January 9, 2026

CVE-2025-66050

9.3
    Vivotek
  • Ip7137
Published: January 9, 2026

CVE-2025-7072

9.3
    Kaon
  • Cg3000tc
  • Cg3000t
Published: January 9, 2026

CVE-2020-36875

9.3
    Accessally
  • Accessally
Published: January 9, 2026

CVE-2025-14741

9.1
    Dynamiapps
  • Frontend Admin
Published: January 9, 2026

CVE-2026-22194

8.9
    Gestsup
  • Gestsup
Published: January 9, 2026

CVE-2025-15500

8.9
    Sangfor
  • Operation And Maintenance Management System
Published: January 9, 2026

CVE-2025-15501

8.9
    Sangfor
  • Operation And Maintenance Management System
Published: January 9, 2026

CVE-2025-69194

8.8
    Gnu
  • Wget2
Published: January 9, 2026

CVE-2026-22081

8.8
    Tenda
  • Wired Routers
  • 300mbps Wireless Router F3
  • N300 Easy Setup Router
Published: January 9, 2026

CVE-2026-22082

8.8
    Tenda
  • 300mbps Wireless Router F3
  • N300 Easy Setup Router
Published: January 9, 2026

CVE-2025-9222

8.7
    Gitlab
  • Gitlab Ce
Published: January 9, 2026

CVE-2026-22079

8.7
    Tenda
  • 300mbps Wireless Router F3
  • N300 Easy Setup Router
Published: January 9, 2026

CVE-2026-22080

8.7
    Tenda
  • 300mbps Wireless Router F3
  • N300 Easy Setup Router
Published: January 9, 2026

CVE-2025-66049

8.7
    Vivotek
  • Ip7137
Published: January 9, 2026

CVE-2025-64091

8.6
    Ntp
  • Ntp
Published: January 9, 2026

CVE-2025-66052

8.6
    Vivotek
  • Ip7137
Published: January 9, 2026

CVE-2026-0830

8.4
    Kiro
  • Kiro Ide
Published: January 9, 2026

CVE-2026-21409

8.2
    Ricoh
  • Streamline Nx
Published: January 9, 2026

CVE-2025-67070

8.2
    Intelbras
  • Cftv Ip Nvd 9032 R Ftd
Published: January 9, 2026

CVE-2025-13761

8.0
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: January 9, 2026

CVE-2026-22195

7.7
    Gestsup
  • Gestsup
Published: January 9, 2026

CVE-2026-22196

7.7
    Gestsup
  • Gestsup
Published: January 9, 2026

CVE-2025-69195

7.6
    Gnu
  • Wget2
Published: January 9, 2026

CVE-2025-64092

7.5
    *
  • *
Published: January 9, 2026

CVE-2025-67133

7.5
    Hero Motocorp
  • Vida
Published: January 9, 2026

CVE-2026-22197

7.5
    Gestsup
  • Gestsup
Published: January 9, 2026

CVE-2025-15499

7.4
    Sangfor
  • Operation And Maintenance Management System
Published: January 9, 2026

CVE-2026-20971

7.3
    Samsung
  • Proca Driver
Published: January 9, 2026

CVE-2025-15055

7.2
    Slimstat
  • Slimstat Analytics
    Wordpress
Published: January 9, 2026

CVE-2025-15057

7.2
    Wordpress
  • Slimstat Analytics
Published: January 9, 2026

CVE-2025-14657

7.2
    Eventin
  • Event Manager
  • Event Calendar
  • Event Tickets
  • Registrations
Published: January 9, 2026

CVE-2025-14937

7.2
    Dynamiapps
  • Frontend Admin
Published: January 9, 2026

CVE-2025-13772

7.1
    Gitlab
  • Gitlab
Published: January 9, 2026

CVE-2025-66051

6.9
    Vivotek
  • Ip7137 Camera
Published: January 9, 2026

CVE-2025-15035

6.9
    Tp-Link
  • Archer Axe75
Published: January 9, 2026

CVE-2025-14803

6.8
    Nex-Forms
  • Nex-Forms
Published: January 9, 2026

CVE-2026-20970

6.8
    Samsung
  • Slocation
Published: January 9, 2026

CVE-2026-20968

6.7
    Samsung
  • Dual Dar
Published: January 9, 2026

CVE-2025-14980

6.5
    Wordpress
  • Betterdocs
Published: January 9, 2026

CVE-2025-10569

6.5
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: January 9, 2026

CVE-2025-13781

6.5
    Gitlab
  • Gitlab Ee
Published: January 9, 2026

CVE-2025-14172

6.5
    Wordpress
  • Page Permalink Extension
Published: January 9, 2026

CVE-2025-67278

6.5
    Tim Solution Gmbh
  • Tim Bpm Suite
  • Tim Flow
Published: January 9, 2026

CVE-2025-46645

6.5
    Dell
  • Powerprotect Data Domain
Published: January 9, 2026

CVE-2025-66715

6.5
    Axtion
  • Odissaas Odis
Published: January 9, 2026

CVE-2025-67810

6.5
    Area9
  • Rhapsode
Published: January 9, 2026

CVE-2025-67811

6.5
    Area9
  • Rhapsode
Published: January 9, 2026

CVE-2025-51626

6.5
    Pss
  • Sale.Com
Published: January 9, 2026

CVE-2025-60538

6.5
    Shiori
  • Shiori
Published: January 9, 2026

CVE-2025-14893

6.4
    Wordpress
  • Indieweb Plugin
Published: January 9, 2026

CVE-2025-15019

6.4
    Wordpress
  • Bialty Bulk Image Alt Text
Published: January 9, 2026

CVE-2026-0563

6.4
    Wordpress
  • Wp Google Street View
Published: January 9, 2026

CVE-2026-0627

6.4
    Wordpress
  • Amp For Wp
Published: January 9, 2026

CVE-2025-13729

6.4
    Wordpress
  • Entry Views
Published: January 9, 2026

CVE-2025-13853

6.4
    Wordpress
  • Nearby Now Reviews Plugin
Published: January 9, 2026

CVE-2025-13900

6.4
    Wordpress
  • Plugin
Published: January 9, 2026

CVE-2025-11453

6.4
    Wordpress
  • Header And Footer Scripts
Published: January 9, 2026

CVE-2025-13704

6.4
    Wordpress
  • Autogen Headers Menu
Published: January 9, 2026

CVE-2025-13852

6.4
    Wordpress
  • Business In A Box
Published: January 9, 2026

CVE-2025-13854

6.4
    Wordpress
  • Curved Text Plugin
Published: January 9, 2026

CVE-2025-13862

6.4
    Wordpress
  • Menu Card
Published: January 9, 2026

CVE-2025-13897

6.4
    Wordpress
  • Client Testimonial Slider
Published: January 9, 2026

CVE-2025-13903

6.4
    Wordpress
  • Pullquote
Published: January 9, 2026

CVE-2025-13908

6.4
    Wordpress
  • Tooltip
Published: January 9, 2026

CVE-2025-13967

6.4
    Woodpecker
  • Woodpecker
Published: January 9, 2026

CVE-2025-13895

6.1
    Wordpress
  • Top Position Google Finance Plugin
Published: January 9, 2026

CVE-2025-13701

6.1
    Wordpress
  • Shabat Keeper
Published: January 9, 2026

CVE-2025-13892

6.1
    Wordpress
  • Mg Advancedoptions
Published: January 9, 2026

CVE-2025-13893

6.1
    Wordpress
  • Lesson Plan Book
Published: January 9, 2026

CVE-2025-46644

6.0
    Dell
  • Powerprotect Data Domain
Published: January 9, 2026

CVE-2025-14718

5.4
    Publishpress
  • Future
Published: January 9, 2026

CVE-2025-11246

5.4
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: January 9, 2026

CVE-2025-67280

5.4
    Tim
  • Tim Bpm Suite
  • Tim Flow
Published: January 9, 2026

CVE-2025-67281

5.4
    Tim
  • Tim Bpm Suite
  • Tim Flow
Published: January 9, 2026

CVE-2025-67282

5.4
    Tim
  • Bpm Suite
  • Flow
Published: January 9, 2026

CVE-2026-0732

5.3
    D-Link
  • Di-8200g
Published: January 9, 2026

CVE-2026-0733

5.3
    Phpgurukul
  • Online Course Registration System
Published: January 9, 2026

CVE-2025-14886

5.3
    Wordpress
  • Japanized For Woocommerce
Published: January 9, 2026

CVE-2025-14574

5.3
    Wedocs
  • Wedocs
Published: January 9, 2026

CVE-2025-14720

5.3
    Wordpress
  • Plugin
Published: January 9, 2026

CVE-2025-14782

5.3
    Wordpress
  • Forminator Forms
Published: January 9, 2026

CVE-2026-20973

5.3
    Samsung
  • Libimagecodec.Quram
Published: January 9, 2026

CVE-2025-14146

5.3
    Wordpress
  • Booking Calendar
Published: January 9, 2026

CVE-2025-13717

5.3
    Wordpress
  • Contact Form Vcard Generator
Published: January 9, 2026

CVE-2025-15492

5.3
    Rainygao
  • Docsys
Published: January 9, 2026

CVE-2025-67279

5.3
    Tim Solution Gmbh
  • Tim Bpm Suite
  • Tim Flow
Published: January 9, 2026

CVE-2026-0803

5.3
    Phpgurukul
  • Online Course Registration System
Published: January 9, 2026

CVE-2026-0817

5.3
    Wikimedia
  • Mediawiki Campaignevents
Published: January 9, 2026

CVE-2025-15493

5.3
    Rainygao
  • Docsys
Published: January 9, 2026

CVE-2025-15494

5.3
    Rainygao
  • Docsys
Published: January 9, 2026

CVE-2025-15496

5.3
    Guchengwuyue
  • Ylshopmall
Published: January 9, 2026

CVE-2026-20974

5.2
    Samsung
  • Device
Published: January 9, 2026

CVE-2026-20976

5.1
    Samsung
  • Galaxy Store
Published: January 9, 2026

CVE-2025-15495

5.1
    Biggidroid
  • Simple Php Cms
Published: January 9, 2026

CVE-2026-22198

5.1
    Gestsup
  • Gestsup
Published: January 9, 2026

CVE-2026-20972

4.8
    Samsung
  • Uwbtest
Published: January 9, 2026

CVE-2025-66315

4.3
    Zte
  • Mf258k Pro
Published: January 9, 2026

CVE-2025-13749

4.3
    Clearfy
  • Clearfy Cache
Published: January 9, 2026

CVE-2025-13628

4.3
    Tutor Lms
  • Tutor Lms
Published: January 9, 2026

CVE-2025-13753

4.3
    Wordpress
  • Wp Table Builder
Published: January 9, 2026

CVE-2025-13934

4.3
    Tutor Lms
  • Tutor Lms
Published: January 9, 2026

CVE-2025-13935

4.3
    Tutorlms
  • Tutorlms
Published: January 9, 2026

CVE-2025-46286

4.3
    Apple
  • Ios
  • Ipad Os
Published: January 9, 2026

CVE-2025-46299

4.3
    Apple
  • Tv Os
  • Safari
  • Watch Os
  • Vision Os
  • Ios
  • Ipad Os
  • Macos
Published: January 9, 2026

CVE-2025-3950

3.5
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: January 9, 2026

CVE-2025-62487

3.5
    Palantir
  • Dossier
Published: January 9, 2026

CVE-2025-46676

2.7
    Dell
  • Powerprotect Data Domain
Published: January 9, 2026

CVE-2026-22710

2.3
    Wikimedia
  • Mediawiki Wikibase Extension
Published: January 9, 2026

CVE-2026-22712

2.3
    Mediawiki
  • Approved Revs
Published: January 9, 2026

CVE-2026-22713

2.3
    Mediawiki
  • Growthexperiments
Published: January 9, 2026

CVE-2026-22714

2.3
    Wikimedia
  • Mediawiki Monaco Skin
Published: January 9, 2026

CVE-2026-20969

2.3
    Samsung
  • Secsettings
Published: January 9, 2026

CVE-2025-46643

2.3
    Dell
  • Powerprotect Data Domain
Published: January 9, 2026

CVE-2026-20975

2.1
    Samsung
  • Samsung Cloud
Published: January 9, 2026

CVE-2026-22630

None
    Fortinet
  • Fortinet
Published: January 9, 2026

CVE-2026-22631

None
    Fortinet
  • Fortinet
Published: January 9, 2026

CVE-2026-22632

None
    Fortinet
  • Fortinet
Published: January 9, 2026

CVE-2026-22633

None
    Fortinet
  • *
Published: January 9, 2026

CVE-2026-22634

None
    Fortinet
  • Fortinet
Published: January 9, 2026

CVE-2026-22635

None
    Fortinet
  • Fortigate
  • Fortinet
Published: January 9, 2026

CVE-2026-22636

None
    Fortinet
  • *
Published: January 9, 2026

CVE-2025-56225

None
    Fluidsynth
  • Fluidsynth
Published: January 9, 2026

CVE-2025-66744

None
    Yonyou
  • Yonbip
Published: January 9, 2026

CVE-2025-67004

None
    Couchcms
  • Couchcms
Published: January 9, 2026

CVE-2025-69542

None
    D-Link
  • Dir895la1
Published: January 9, 2026

CVE-2025-70161

None
    Edimax
  • Br-6208ac
Published: January 9, 2026

CVE-2025-46297

None
    Apple
  • Macos
Published: January 9, 2026

CVE-2025-46298

None
    Apple
  • Tv Os
  • Safari
  • Watch Os
  • Vision Os
  • Ios
  • Ipad Os
  • Mac Os Tahoe
Published: January 9, 2026

CVE-2026-22584

None
    Salesforce
  • Uni2ts
Published: January 9, 2026
Click here to see more Vulnerabilities