SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
CVE Research
SUDO Vulnerabilities put Data, Operations, and Compliance at risk
Two recent SUDO vulnerabilities (CVE-2025-32462, CVE-2025-32463) let a local user gain root-level access and gain full control of the machine. Apply the vendor patches immediately and reduce SUDO privileges on critical systems to avoid data loss, operational downtime, and regulatory risks.
CVE Research
Managing CISA Known Exploitable Vulnerabilities (KEVs) and Enhancing Cyber Resilience using Saner CVEM
Vulnerabilities and exploits are strange bedfellows. While vulnerabilities are unintended and often unavoidable, exploits are deliberately created to feast on these vulnerabilities.
CVE Research
Inside the MSC EvilTwin Exploit Chain – How APTs Bypass MMC Security
A critical security feature bypass vulnerability in Microsoft Management Console (MMC), identified as CVE-2025-26633, has been weaponized in targeted attacks by Russian-aligned threat actors. This flaw, dubbed “MSC EvilTwin,” enables attackers to craft specially manipulated .msc files and provisioni...
CVE Research
FortiSIEM Vulnerability CVE-2025-25256: Unauthenticated OS Command Injection Now Active
Fortinet has issued a critical security advisory regarding a high-severity vulnerability in its FortiSIEM platform, identified as CVE-2025-25256. This flaw, which has a CVSS score of 9.8, is a remote, unauthenticated command injection vulnerability that can allow attackers to execute unauthorized co...
CVE Research
Act Now: Cisco FMC RADIUS Flaw Allows Unauthenticated Remote Code Execution
Cisco has recently addressed a critical security vulnerability, CVE-2025-20265, in its Secure Firewall Management Center (FMC) Software. With a maximum CVSS score of 10.0, this flaw poses a significant risk, potentially allowing unauthenticated, remote attackers to execute arbitrary shell commands o...
CVE Research
Auto-Color Backdoor Weaponizes SAP Flaw for Stealthy Access
A critical zero-day vulnerability in SAP NetWeaver, CVE-2025-31324, is being exploited to deliver “Auto-Color,” a stealthy Linux backdoor. The vulnerability allows for unauthenticated remote code execution (RCE), enabling attackers to achieve full system compromise. Multiple threat actors, including...
CVE Research
Ivanti EPM Under Fire: How Attackers Can Steal Credentials and Access Your Data
Ivanti has recently addressed three high-severity vulnerabilities in its Endpoint Manager (EPM) software. These flaws could allow attackers to decrypt other users’ passwords or access sensitive database information if exploited. This blog post provides a detailed overview of these vulnerabilities an...