NVD disclosure day

Published threat advisories for July 21, 2025

CVE advisoryCRITICAL

CVE-2025-44654

Linksys E2500 Firmware Privilege Escalation Via VSFTPD Configuration

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A configuration issue in Linksys E2500 firmware could allow unauthorized access to system files, leading to privilege escalation or internal network attacks. This vulnerability's relevance depends on whether the affected technology is reachable and exposed.

NVD published:

CVE advisoryCRITICAL

CVE-2025-44655

TOTOLINK Routers Insecure FTP Configuration Allows Unauthorized Access

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A critical vulnerability in TOTOLINK routers allows unauthorized access to system files, privilege escalation, or use as a pivot point for internal network attacks. This issue arises from an insecure FTP configuration, enabling unauthenticated attackers to exploit the vulnerability via the internet.

NVD published: