{"uuid": "d4c0b1ad-5dfa-4223-97c6-d8a8b4f7d6ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20393", "type": "seen", "source": "https://t.me/cissp/7849", "content": "1. WARNING: CVE-2025-20393 is rated 10.0, with no patch available.\n\nCisco confirmed active exploitation of an AsyncOS zero-day by a China-linked APT. The flaw allows root-level command execution on affected email security appliances and enables attackers to establish persistence.\nDetails and mitigations:\n https://lnkd.in/dKZ5aRc2\n\n2. A critical ASUS Live Update vulnerability is now on CISA\u2019s exploited list.\n\nCVSS 9.3, supply chain based, and tied to ShadowHammer, it embedded malicious code in signed updates for carefully chosen devices.\nhttps://lnkd.in/dzW-DxTC\n\n3. HPE patched a CRITICAL CVSS 10.0 flaw in OneView that allows unauthenticated remote code execution.\n\nAll versions before 11.00 are affected, with hotfixes for 5.20\u201310.20.No active exploits reported, but patching is urgent. Details here\n https://lnkd.in/ddGsRZtm\n\n\u2014 CISO as a Service \u2014\n| Strategic Cyber Defense & GRC\nResilient Through Knowledge\n2025.12.19\n\nhttps://www.linkedin.com/posts/alirezaghahrood_cisco-warns-of-active-attacks-exploiting-activity-7407599988215635968-3iGW", "creation_timestamp": "2026-09-02T01:03:47.354774Z"}