CVE-2025-13659 2

Vulnerability (CVE)

Fortinet, Ivanti, and SAP Issue Urgent Patches for Authentication and Code Execution Flaws

Fortinet, Ivanti, and SAP released patches for critical flaws that could enable authentication bypass and code execution, including Fortinet's CVE-2025-59718 and CVE-2025-59719 (CVSS 9.8), which allow an unauthenticated attacker to bypass FortiCloud SSO...

Vulnerabilities & Patching

.NET SOAPwn Flaw Opens Door for File Writes and Remote Code Execution via Rogue WSDL

Cyber Risks The Hacker News

WatchTowr Labs detailed a .NET Framework flaw it calls SOAPwn, presented by researcher Piotr Bazydlo at Black Hat Europe in London, in which WSDL imports and HTTP client proxies can be manipulated to write arbitrary files and achieve remote code execution...

Threat Actors & Nation-State