Multiple Critical CVEs Exploited in Cybersecurity Attacks

A series of vulnerabilities, including CVE-2025-49144, CVE-2025-31702, and CVE-2026-46333, have been identified, affecting systems like Notepad++ and FortiWeb devices. These vulnerabilities allow for local privilege escalation, SQL injection, and remote code execution. Attackers exploit these flaws through various methods, including manipulating installation paths and unauthorized file uploads. The scope of impact includes potentially millions of users and systems that have not yet applied necessary patches. Current reports indicate active exploitation of these vulnerabilities, particularly in the wild. Security professionals are urged to prioritize updates and implement mitigation strategies to protect their systems. Tools and proof-of-concept (PoC) exploits are publicly available, increasing the urgency for remediation.

Key Points: • CVE-2025-49144 allows local privilege escalation in Notepad++ installations. • CVE-2025-31702 enables SQL injection and remote code execution in FortiWeb devices. • Active exploitation of these vulnerabilities has been confirmed, necessitating immediate patching.