Multiple Vulnerabilities Discovered in Cybersecurity Software

First seen 18 Nov 2025, 14:13 UTC • Api.Msrc.Microsoft

•50

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

CVE-2025-64756 identifies a command injection vulnerability in the glob CLI affecting versions 10.3.7 to 11.0.3. CVE-2025-64446 reveals a relative path traversal vulnerability in Fortinet FortiWeb versions 8.0.0 to 8.0.1 and earlier, allowing attackers to execute administrative commands via crafted requests.

Ask AI about this cluster

Answers cite the sources they use

How this analysis works

Attack Flow

21 entities, 52 inferred relationships (STIX 2.1).

Technique (3)

Command Injection
Privilege Escalation
Zero-day Exploit

Organization (1)

Sonic

Vulnerability (6)

CVE-2025-13223
CVE-2025-59367
CVE-2025-64446
CVE-2025-64756
FortiWeb
Relative Path Traversal

Affected Platform (9)

Application Gateway
Chromium
Dsl-ac51
Dsl-ac750
Dsl-n16
Dynamics OmniChannel
Dynamics OmniChannel SDK Storage Containers
Microsoft Edge
Visual Studio Code

Tool (2)

GitHub Copilot
Google Chrome

Relationships

GitHub Copilot exploits CVE-2025-13223
GitHub Copilot exploits CVE-2025-59367
GitHub Copilot exploits CVE-2025-64446
GitHub Copilot exploits CVE-2025-64756
GitHub Copilot exploits FortiWeb
Google Chrome exploits CVE-2025-13223
Google Chrome exploits CVE-2025-59367
Google Chrome exploits CVE-2025-64446
Google Chrome exploits CVE-2025-64756
Google Chrome exploits FortiWeb
CVE-2025-13223 targets Application Gateway
CVE-2025-13223 targets Chromium
CVE-2025-13223 targets Dsl-ac51
CVE-2025-13223 targets Dsl-ac750
CVE-2025-59367 targets Application Gateway
CVE-2025-59367 targets Chromium
CVE-2025-59367 targets Dsl-ac51
CVE-2025-59367 targets Dsl-ac750
CVE-2025-64446 targets Application Gateway
CVE-2025-64446 targets Chromium
CVE-2025-64446 targets Dsl-ac51
CVE-2025-64446 targets Dsl-ac750
CVE-2025-64756 targets Application Gateway
CVE-2025-64756 targets Chromium
CVE-2025-64756 targets Dsl-ac51
CVE-2025-64756 targets Dsl-ac750
FortiWeb targets Application Gateway
FortiWeb targets Chromium
FortiWeb targets Dsl-ac51
FortiWeb targets Dsl-ac750
Relative Path Traversal targets Application Gateway
Relative Path Traversal targets Chromium
Relative Path Traversal targets Dsl-ac51
Relative Path Traversal targets Dsl-ac750
Command Injection targets Application Gateway
Command Injection targets Chromium
Command Injection targets Dsl-ac51
Command Injection targets Dsl-ac750
Privilege Escalation targets Application Gateway
Privilege Escalation targets Chromium
Privilege Escalation targets Dsl-ac51
Privilege Escalation targets Dsl-ac750
Zero-day Exploit targets Application Gateway
Zero-day Exploit targets Chromium
Zero-day Exploit targets Dsl-ac51
Zero-day Exploit targets Dsl-ac750
CVE-2025-13223 related to Sonic
CVE-2025-13223 related to Dsl-n16
CVE-2025-13223 related to Dynamics OmniChannel
CVE-2025-13223 related to Dynamics OmniChannel SDK Storage Containers
CVE-2025-13223 related to Microsoft Edge
CVE-2025-13223 related to Visual Studio Code

Continue Reading

New Cross-Chain Vulnerabilities Threaten DeFi Security Across Multiple Blockchains Balancer DeFi Protocol Loses Over $128 Million in Major Hack Balancer V2 Vulnerability Leads to Over $1.16 Billion in Stolen Assets Balancer Suffers $128 Million Exploit Due to Smart Contract Vulnerability Balancer DeFi Protocol Exploit Results in Over $128 Million Loss Multiple Vulnerabilities Identified in Microsoft Products (CVE-2025)

Multiple Vulnerabilities Discovered in Cybersecurity Software

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading