CVE-2025-59287 - Vulnerability Details

Related Threat Clusters

• FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation

  A critical vulnerability in FortiWeb Web Application Firewall (WAF) has been actively exploited, allowing attackers to gain full administrative access to affected systems. Organizations using FortiWeb are at risk of…

  100 articles · Updated November 15, 2025
• CISA Warns of Active Exploitation of CVE-2024-1086 in Ransomware Attacks

  The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert regarding the active exploitation of a critical vulnerability in the Linux kernel, tracked as CVE-2024-1086. This privilege escalation…

  1 article · Updated November 4, 2025
• Critical RCE Vulnerability in Windows Server Update Services Actively Exploited

  Microsoft has released an out-of-band security update for a critical vulnerability, CVE-2025-59287, in Windows Server Update Services (WSUS) that allows unauthenticated remote code execution. The vulnerability, stemming…

  17 articles · Updated November 1, 2025
• CISA Warns of Active Exploitation of CVE-2024-1086 in Ransomware Attacks

  The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert regarding the active exploitation of a critical vulnerability in the Linux kernel, tracked as CVE-2024-1086. This privilege escalation…

  5 articles · Updated November 4, 2025
• Critical Vulnerability in WatchGuard Firebox OS Actively Exploited

  A critical vulnerability (CVE-2025-9242) in WatchGuard Firebox OS allows remote unauthenticated attackers to execute arbitrary code. Affected versions include Fireware OS 11.x, 12.x, and 2025.1. The U.S. Cybersecurity &…

  3 articles · Updated November 13, 2025
• Critical Vulnerability in WatchGuard Fireware OS Exposed to Remote Attacks

  A critical vulnerability (CVE-2025-9242) in WatchGuard's Fireware OS has been identified, allowing remote unauthenticated attackers to execute arbitrary code on over 54,000 Firebox devices globally. The U.S.…

  4 articles · Updated November 14, 2025
• Cisco Faces Multiple Critical Vulnerabilities in Unified CCX and Firewalls

  Cisco has disclosed critical vulnerabilities in its Unified Contact Center Express (CCX) platform and Adaptive Security Appliances (ASA) that allow unauthenticated remote attackers to execute arbitrary code and…

  10 articles · Updated November 10, 2025
• CISA Flags OpenPLC ScadaBR Vulnerability as Actively Exploited

  The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the OpenPLC ScadaBR vulnerability, tracked as CVE-2021-26829, to its Known Exploited Vulnerabilities catalog after confirming active…

  2 articles · Updated December 2, 2025
• Washington Post Data Breach Linked to Oracle E-Business Suite Exploit

  The Washington Post has confirmed a data breach affecting nearly 10,000 current and former employees due to a cyberattack linked to vulnerabilities in Oracle's E-Business Suite. The breach, attributed to the Cl0p…

  50 articles · Updated December 1, 2025
• ShadowPad Malware Exploits WSUS Vulnerability for System Access

  Attackers exploited a critical vulnerability in Windows Server Update Services (WSUS), identified as CVE-2025-59287, to deploy ShadowPad malware. This backdoor, associated with China-linked APT groups, allows for full…

  2 articles · Updated November 24, 2025

Recent Intelligence Reports

• SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 74 — Securityaffairs.Co · December 7, 2025
• CISA Adds CVE-2021 — Webpronews · November 30, 2025
• SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 73 — Securityaffairs.Co · November 30, 2025
• Attackers deliver ShadowPad via newly patched WSUS RCE bug — Securityaffairs.Co · November 24, 2025
• Chinese Hackers Exploiting WSUS Remote Code Execution Vulnerability to Deploy ... — Gbhackers · November 21, 2025
• Analysis of ShadowPad Attack Exploiting WSUS Remote Code Execution Vulnerability (CVE-2025-59287) — Asec.Ahnlab · November 18, 2025
• Firewall Under Siege: CISA's Urgent Alert on WatchGuard's Exploited Vulnerability — Webpronews · November 14, 2025
• CC-4716 - Exploitation of WatchGuard Firebox OS Vulnerability CVE-2025 — Digital.Nhs.Uk · November 13, 2025

Related Entities