CVE-2025-40540

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

February 24, 2026

Last Seen

February 25, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Zyxel Addresses Critical RCE Flaw in Multiple Router Models67.6

Zyxel has issued security updates for a critical remote command execution vulnerability, tracked as CVE-2025-13942, affecting various router models. The flaw exists in the UPnP function, allowing unauthenticated attackers to execute arbitrary OS commands on unpatched devices. Affected devices includ...

Critical Vulnerabilities in SolarWinds Serv-U Software Patched49.6

SolarWinds has issued security updates for four critical remote code execution vulnerabilities in its Serv-U software, which could allow attackers to gain root access to unpatched servers. The affected software is used for secure file transfers on Windows and Linux systems. The most severe flaw has...