CVE-2025-61932Critical· 9.8▾ Hadal⚠ Exploited in the wildLanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets.
▾ Hadal zone — Critical and actively exploited (CISA KEV / 0day)
impact 53.9 · likelihood 0.6 · exploitation 25
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Federal remediation due Nov 12, 2025
Last analysed / modified upstream
2.8%
Added to the CISA catalog on Oct 22, 2025. Federal remediation due Nov 12, 2025. View catalog ↗
Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets.
lanscope_endpoint_manager < 9.3.2.7lanscope_endpoint_manager >= 9.3.3.0, < 9.3.3.9lanscope_endpoint_manager >= 9.4.0.0, < 9.4.0.5lanscope_endpoint_manager >= 9.4.1.0, < 9.4.1.5lanscope_endpoint_manager >= 9.4.2.0, < 9.4.2.6lanscope_endpoint_manager >= 9.4.3.0, < 9.4.3.8lanscope_endpoint_manager >= 9.4.4.0, < 9.4.4.6lanscope_endpoint_manager >= 9.4.5.0, < 9.4.5.4lanscope_endpoint_manager >= 9.4.6.0, < 9.4.6.3lanscope_endpoint_manager >= 9.4.7.0, <= 9.4.7.1Upgrade past the affected range:
lanscope_endpoint_manager 9.4.6.3Connected by shared product, vendor, weakness, or advisory.
CVE-2026-45245High· 7.4Summarize prior to 0.15.1 contains a vulnerability in the hover summary feature that allows malicious pages to dispatch synthetic mouseover events over attacker-controlled links, causing the extension to make authenticated daemon request…
CVE-2025-43280Medium· 4.7The issue was resolved by not loading remote images
CVE-2026-2611Critical· 9.6MLflow: Improper Origin Validation in MLflow Assistant /ajax-api Endpoints Enables Browser-Mediated Local Command Execution
CVE-2026-59786Medium· 6.9Zabbix Server and Proxy accept the active agent heartbeat message regardless of the configured PSK or certificate authentication
CVE-2026-102117High· 7.2On deployments where the remote-support capability is licensed and enabled, an authenticated System Administrator who also possessed the key protecting the submitted data could redirect the underlying system's outbound support connection…
CVE-2025-40820High· 7.5Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range