Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
A critical vulnerability in FortiWeb Web Application Firewall (WAF) has been actively exploited, allowing attackers to gain full administrative access to affected systems. Organizations using FortiWeb are at risk of total control being seized by malicious actors. The flaw has been confirmed to be ex...
Two critical vulnerabilities affecting Windows systems have been addressed with micropatches. CVE-2025-60704, a privilege escalation vulnerability in Kerberos, allows attackers on local networks to impersonate domain users. This flaw was reported by Eliran Partush and Dor Segal of Silverfort and was...
In December 2025, Adobe released five bulletins addressing 139 unique vulnerabilities as part of its security updates. This follows the November updates, where Adobe addressed 29 unique CVEs across several products. Microsoft also provided updates during this final patch Tuesday of the year.
