Sploitus Multiple Critical CVEs Exploited in Cybersecurity Attacks
Article Content
- •CVE-2025-49144 allows local privilege escalation in Notepad++ installations.
- •CVE-2025-31702 enables SQL injection and remote code execution in FortiWeb devices.
- •Active exploitation of these vulnerabilities has been confirmed, necessitating immediate patching.
A series of vulnerabilities, including CVE-2025-49144, CVE-2025-31702, and CVE-2026-46333, have been identified, affecting systems like Notepad++ and FortiWeb devices. These vulnerabilities allow for local privilege escalation, SQL injection, and remote code execution. Attackers exploit these flaws through various methods, including manipulating installation paths and unauthorized file uploads. The scope of impact includes potentially millions of users and systems that have not yet applied necessary patches. Current reports indicate active exploitation of these vulnerabilities, particularly in the wild. Security professionals are urged to prioritize updates and implement mitigation strategies to protect their systems. Tools and proof-of-concept (PoC) exploits are publicly available, increasing the urgency for remediation.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (100)
Following this threat?
Track CVE-2019-16889 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Hackers Exploit Firewalls, Compromise 70,000 Credentials Globally A large-scale cyber campaign has targeted exposed network edge devices, specifically Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls, leading to the compromise of over 70,000 credentials. The threat actor, known as k0t, has been active since October 2025 and is linked to ransomware groups like Qilin… 
TAG-193 Targets Central Asian Governments in Espionage Campaign TAG-193 has been linked to a series of espionage operations targeting government institutions in Russia, Tajikistan, Belarus, Armenia, and Uzbekistan from early 2025 to May 2026. The group utilized spearphishing tactics, including compromised accounts and malicious documents, to gain access to sensitive information…