NVD disclosure day

Published threat advisories for September 12, 2025

CVE advisoryCRITICAL

CVE-2025-55835

SueamCMS File Upload Vulnerability Allows Remote Code Execution.

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A critical vulnerability in SueamCMS allows remote attackers to execute arbitrary code due to unfiltered file uploads. This impacts internet-facing web applications, potentially leading to system compromise. Confirm relevance to SueamCMS to understand exposure.

CVE advisoryKnown Exploit

CVE-2025-21042

Samsung Mobile Devices: Code Execution Vulnerability.

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

Samsung Android devices have an out-of-bounds write vulnerability in a library that handles image processing. This flaw can allow remote attackers to execute arbitrary code on affected devices, leading to potential system compromise and data exfiltration. This presents a significant business risk.

• CISA KEV