{"metadata": {"vulnerability": "CVE-2025-28137", "count": 32, "kinds": {"milestone": 4, "sighting": 7, "kev": 11, "other": 10}}, "data": [{"timestamp": "2025-03-11T00:00:00Z", "date_only": false, "value": "2025-03-11T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-28137", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-04-15T00:00:00Z", "date_only": false, "value": "2025-04-15T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-28137", "field": "timestamps.asserted_at", "uuid": "d364fb18-bbe6-4d45-b8e5-cb2241828d1c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-15T00:00:00Z", "date_only": false, "value": "2025-04-15T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-28137", "field": "evidence.0.details.added_date", "uuid": "d364fb18-bbe6-4d45-b8e5-cb2241828d1c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-15T00:00:00Z", "date_only": false, "value": "2025-04-15T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-28137", "field": "timestamps.first_seen_at", "uuid": "d364fb18-bbe6-4d45-b8e5-cb2241828d1c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-15T00:00:00Z", "date_only": false, "value": "2025-04-15T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-28137", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-04-15T00:00:00Z", "date_only": false, "value": "2025-04-15T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-28137", "field": "status.status_updated_at", "uuid": "d364fb18-bbe6-4d45-b8e5-cb2241828d1c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-15T14:05:53.682Z", "date_only": false, "value": "2025-04-15T14:05:53.682Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2025-28137", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-15T14:15:41Z", "date_only": false, "value": "2025-04-15T14:15:41Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FCHW-692R-4W73", "record": "GHSA-FCHW-692R-4W73", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-04-15T14:15:41.400Z", "date_only": false, "value": "2025-04-15T14:15:41.400", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-28137", "record": "FKIE_CVE-2025-28137", "field": "published"}, {"timestamp": "2025-04-15T15:30:53Z", "date_only": false, "value": "2025-04-15T15:30:53Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FCHW-692R-4W73", "record": "GHSA-FCHW-692R-4W73", "field": "published"}, {"timestamp": "2025-04-15T16:38:50.839Z", "date_only": false, "value": "2025-04-15T16:38:50.839474Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmujasss7m2g", "record": "CVE-2025-28137", "field": "creation_timestamp", "uuid": "b5c6a1d5-428c-4400-bca6-c36db8100421", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmujasss7m2g"}, {"timestamp": "2025-04-15T17:26:32Z", "date_only": false, "value": "2025-04-15T17:26:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/22954", "record": "CVE-2025-28137", "field": "creation_timestamp", "uuid": "7264313f-3071-42cf-9322-39a6545fff61", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-28137 - TOTOLINK A810R Remote Command Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-28137 \nPublished : April 15, 2025, 2:15 p.m. | 54\u00a0minutes ago \nDescription : The TOTOLINK A810R V4.1.2cu.5182_B20201026 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/22954"}, {"timestamp": "2025-04-15T17:31:53.931Z", "date_only": false, "value": "2025-04-15T17:31:53.931384Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-28137", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2025-04-15T17:31:53.931Z", "date_only": false, "value": "2025-04-15T17:31:53.931384Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-28137", "record": "FKIE_CVE-2025-28137", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-15T17:35:32.265Z", "date_only": false, "value": "2025-04-15T17:35:32.265Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-28137", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-04-15T17:35:32.265Z", "date_only": false, "value": "2025-04-15T17:35:32.265Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-28137", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-15T18:31:43Z", "date_only": false, "value": "2025-04-15T18:31:43Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FCHW-692R-4W73", "record": "GHSA-FCHW-692R-4W73", "field": "modified"}, {"timestamp": "2025-04-15T20:48:10.370Z", "date_only": false, "value": "2025-04-15T20:48:10.370305Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114343941659414629", "record": "CVE-2025-28137", "field": "creation_timestamp", "uuid": "5dc520e5-c058-4c83-94e7-d85654d4210e", "url": "https://mastodon.social/users/CyberSignaler/statuses/114343941659414629"}, {"timestamp": "2025-04-25T00:00:00Z", "date_only": true, "value": "2025-04-25", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2025-12011", "record": "CNVD-2025-12011", "field": "submitTime"}, {"timestamp": "2025-06-10T00:00:00Z", "date_only": true, "value": "2025-06-10", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2025-12011", "record": "CNVD-2025-12011", "field": "openTime"}, {"timestamp": "2025-07-21T00:00:00Z", "date_only": true, "value": "2025-07-21", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2025-28137", "field": "evidence.0.details.observation_date", "uuid": "b4f7574b-1c50-4472-bb74-c3bb07a91ee4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-21T01:58:14Z", "date_only": false, "value": "2025-07-21T01:58:14+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2025-28137", "field": "timestamps.asserted_at", "uuid": "b4f7574b-1c50-4472-bb74-c3bb07a91ee4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-21T01:58:14Z", "date_only": false, "value": "2025-07-21T01:58:14+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2025-28137", "field": "timestamps.first_seen_at", "uuid": "b4f7574b-1c50-4472-bb74-c3bb07a91ee4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-21T01:58:14Z", "date_only": false, "value": "2025-07-21T01:58:14+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2025-28137", "field": "timestamps.last_seen_at", "uuid": "b4f7574b-1c50-4472-bb74-c3bb07a91ee4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-21T01:58:14Z", "date_only": false, "value": "2025-07-21T01:58:14+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2025-28137", "field": "status.status_updated_at", "uuid": "b4f7574b-1c50-4472-bb74-c3bb07a91ee4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-23T21:02:30.015Z", "date_only": false, "value": "2025-07-23T21:02:30.015495Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lunw56253h23", "record": "CVE-2025-28137", "field": "creation_timestamp", "uuid": "82cf2ffc-bf6b-4300-a543-ad7b68fc9b74", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lunw56253h23"}, {"timestamp": "2026-06-17T09:04:35.993Z", "date_only": false, "value": "2026-06-17T09:04:35.993", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-28137", "record": "FKIE_CVE-2025-28137", "field": "lastModified"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-28137", "field": "timestamps.recorded_at", "uuid": "d364fb18-bbe6-4d45-b8e5-cb2241828d1c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:06:08.718Z", "date_only": false, "value": "2026-06-23T14:06:08.718403Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d364fb18-bbe6-4d45-b8e5-cb2241828d1c", "record": "CVE-2025-28137", "field": "creation_timestamp", "uuid": "26422e0b-7040-43f0-8923-c1848c0d212e", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d364fb18-bbe6-4d45-b8e5-cb2241828d1c"}, {"timestamp": "2026-06-30T11:20:47Z", "date_only": false, "value": "2026-06-30T11:20:47+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2025-28137", "field": "timestamps.recorded_at", "uuid": "b4f7574b-1c50-4472-bb74-c3bb07a91ee4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-30T11:39:52.605Z", "date_only": false, "value": "2026-06-30T11:39:52.605514Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b4f7574b-1c50-4472-bb74-c3bb07a91ee4", "record": "CVE-2025-28137", "field": "creation_timestamp", "uuid": "978f5759-8189-4a25-b1d3-ef6b2ebe16ac", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b4f7574b-1c50-4472-bb74-c3bb07a91ee4"}, {"timestamp": "2026-08-14T16:00:16.360Z", "date_only": false, "value": "2026-08-14T16:00:16.360063Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/614", "record": "CVE-2025-28137", "field": "creation_timestamp", "uuid": "58861d8e-ec32-4cce-8b07-fde6e40f6400", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-47188 (Command Injection) \u0438 CVE-2025-47187 \u2014 \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Mitel SIP \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0430\u0445, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043c\u043e\u0434\u0435\u043b\u044f\u0445 \u0434\u043b\u044f \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446-\u0441\u0432\u044f\u0437\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0440\u0430\u0431\u043e\u0442\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\ud83d\udd35 CVE-2024-26809 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 nftables \u044f\u0434\u0440\u0430 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f root) \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u044f\u0434\u0440\u0430.\n\n\ud83d\udd35 CVE-2025-24797 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Meshtastic, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35 CVE-2025-28137 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430 TOTOLINK A810R, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0410\u0442\u0430\u043a\u0430 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 NoticeUrl \u0444\u0443\u043d\u043a\u0446\u0438\u0438 setNoticeCfg, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u041e\u0421.\n\n\ud83d\udd35 CVE-2025-1782 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 HylaFAX Enterprise \u0438 AvantFAX. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 language \u0432 \u0444\u043e\u0440\u043c\u0430\u0445, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35 CVE-2025-2567 \u2014 \u0431\u0430\u0433 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Lantronix, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n#blue_team #CVE_\u0434\u043d\u044f", "url": "https://t.me/purp_sec/614"}]}