CVE-2025

Api.Msrc.Microsoft • November 20, 2025

Stack-based buffer overflow in Software for Open Networking in the Cloud (SONiC) allows an unauthorized attacker to elevate privileges over a network.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities Discovered in Cybersecurity Software CVE-2025-64756 identifies a command injection vulnerability in the glob CLI affecting versions 10.3.7 to 11.0.3. CVE-2025-64446 reveals a relative path traversal vulnerability in Fortinet FortiWeb versions 8.0.0 to 8.0.1 and earlier, allowing attackers to execute administrative commands via crafted requests. 19 sources 50

CVE-2025

The full story

Extracted Entities

Attack Types (1)

Companies (1)