{"metadata": {"vulnerability": "CVE-2025-27237", "count": 27, "kinds": {"milestone": 6, "sighting": 7, "kev": 0, "other": 14}}, "data": [{"timestamp": "2025-02-20T11:40:38.480Z", "date_only": false, "value": "2025-02-20T11:40:38.480Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-27237", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-10-03T00:00:00Z", "date_only": false, "value": "2025-10-03T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0840", "record": "CERTFR-2025-AVI-0840", "field": "last_revision_date"}, {"timestamp": "2025-10-03T00:00:00Z", "date_only": true, "value": "2025-10-03", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0840", "record": "CERTFR-2025-AVI-0840", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-10-03T00:00:00Z", "date_only": false, "value": "2025-10-03T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0840", "record": "CERTFR-2025-AVI-0840", "field": "revisions.0.revision_date"}, {"timestamp": "2025-10-03T11:28:43.076Z", "date_only": false, "value": "2025-10-03T11:28:43.076Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-27237", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-10-03T11:28:43.076Z", "date_only": false, "value": "2025-10-03T11:28:43.076Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Zabbix", "record": "CVE-2025-27237", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-03T12:15:43Z", "date_only": false, "value": "2025-10-03T12:15:43Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-R6X3-VWPM-5VWG", "record": "GHSA-R6X3-VWPM-5VWG", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-10-03T12:15:43.930Z", "date_only": false, "value": "2025-10-03T12:15:43.930", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-27237", "record": "FKIE_CVE-2025-27237", "field": "published"}, {"timestamp": "2025-10-03T12:33:15Z", "date_only": false, "value": "2025-10-03T12:33:15Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-R6X3-VWPM-5VWG", "record": "GHSA-R6X3-VWPM-5VWG", "field": "published"}, {"timestamp": "2025-10-03T12:33:15Z", "date_only": false, "value": "2025-10-03T12:33:15Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-R6X3-VWPM-5VWG", "record": "GHSA-R6X3-VWPM-5VWG", "field": "modified"}, {"timestamp": "2025-10-04T03:55:25.723Z", "date_only": false, "value": "2025-10-04T03:55:25.723856Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-27237", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-10-04T03:55:25.723Z", "date_only": false, "value": "2025-10-04T03:55:25.723856Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-27237", "record": "FKIE_CVE-2025-27237", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-10-05T22:00:00Z", "date_only": false, "value": "2025-10-05T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2207", "record": "WID-SEC-W-2025-2207", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-10-05T22:00:00Z", "date_only": false, "value": "2025-10-05T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2207", "record": "WID-SEC-W-2025-2207", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-10-05T22:00:00Z", "date_only": false, "value": "2025-10-05T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2207", "record": "WID-SEC-W-2025-2207", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-10-05T22:00:00Z", "date_only": false, "value": "2025-10-05T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2207", "record": "WID-SEC-W-2025-2207", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-10-06T06:48:15.252Z", "date_only": false, "value": "2025-10-06T06:48:15.252784Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m2izeyov7l2t", "record": "CVE-2025-27237", "field": "creation_timestamp", "uuid": "d785a027-7ad1-4bad-8fda-0dca37ed449c", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m2izeyov7l2t"}, {"timestamp": "2025-10-06T11:38:12.942Z", "date_only": false, "value": "2025-10-06T11:38:12.942+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2207", "record": "WID-SEC-W-2025-2207", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-06T13:50:04.897Z", "date_only": false, "value": "2025-10-06T13:50:04.897471Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m2jqx7zo3s2r", "record": "CVE-2025-27237", "field": "creation_timestamp", "uuid": "48d05983-3e78-41f3-91ce-a341076d9515", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m2jqx7zo3s2r"}, {"timestamp": "2025-10-06T17:33:28Z", "date_only": false, "value": "2025-10-06T17:33:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ics_cert/1333", "record": "CVE-2025-27237", "field": "creation_timestamp", "uuid": "0a92b90b-e4a6-47b2-b0b5-75afe94b3817", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u062c\u0632\u0627\u06cc Zabbix Agent \u0648 Agent2 \u062f\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0646\u0638\u0627\u0631\u062a \u0628\u0631 \u0632\u06cc\u0631\u0633\u0627\u062e\u062a \u0641\u0646\u0627\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a Zabbix \u0628\u0647 \u0646\u0642\u0635\u200c\u0647\u0627\u06cc \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u06a9\u0646\u062a\u0631\u0644 \u0628\u0627\u0631\u06af\u0630\u0627\u0631\u06cc \u0641\u0627\u06cc\u0644 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc OpenSSL \u0645\u0631\u0628\u0648\u0637 \u0645\u06cc\u200c\u0634\u0648\u062f. \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0646\u0641\u0648\u0630\u06af\u0631 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u0627\u0645\u062a\u06cc\u0627\u0632\u0627\u062a \u062e\u0648\u062f \u0631\u0627 \u0628\u0627 \u0648\u0627\u0631\u062f \u06a9\u0631\u062f\u0646 \u0641\u0627\u06cc\u0644 DLL \u0628\u0647\u200c\u0637\u0648\u0631 \u062e\u0627\u0635 \u0633\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0627\u0641\u0632\u0627\u06cc\u0634 \u062f\u0647\u062f.\n\nBDU:2025-12554\nCVE-2025-27237\n\n\u0646\u0635\u0628 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627 \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0645\u0639\u062a\u0628\u0631\u060c \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u06cc \u062a\u0646\u0647\u0627 \u067e\u0633 \u0627\u0632 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u062a\u0645\u0627\u0645\u06cc \u0631\u06cc\u0633\u06a9\u200c\u0647\u0627\u06cc \u0645\u0631\u062a\u0628\u0637 \u0646\u0635\u0628 \u0634\u0648\u0646\u062f.\n\n\u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062c\u0628\u0631\u0627\u0646\u06cc:\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0622\u0646\u062a\u06cc\u200c\u0648\u06cc\u0631\u0648\u0633 \u0628\u0631\u0627\u06cc \u0628\u0631\u0631\u0633\u06cc \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u062f\u0631\u06cc\u0627\u0641\u062a \u0634\u062f\u0647 \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0646\u0627\u0645\u0639\u062a\u0628\u0631\u061b\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0645\u062d\u06cc\u0637 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u06cc \u0628\u0633\u062a\u0647 \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631 \u0628\u0627 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u062f\u0631\u06cc\u0627\u0641\u062a \u0634\u062f\u0647 \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0646\u0627\u0645\u0639\u062a\u0628\u0631\u061b\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc SIEM \u0628\u0631\u0627\u06cc \u0631\u0635\u062f \u0631\u0648\u06cc\u062f\u0627\u062f\u0647\u0627\u06cc \u0645\u0631\u062a\u0628\u0637 \u0628\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u0641\u0627\u06cc\u0644 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc OpenSSL\u061b\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u062a\u0634\u062e\u06cc\u0635 \u0648 \u067e\u06cc\u0634\u06af\u06cc\u0631\u06cc \u0627\u0632 \u0646\u0641\u0648\u0630 \u0628\u0631\u0627\u06cc \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc (\u06a9\u0634\u0641\u060c \u062b\u0628\u062a) \u0648 \u0648\u0627\u06a9\u0646\u0634 \u0628\u0647 \u062a\u0644\u0627\u0634\u200c\u0647\u0627\u06cc \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627.\n\n\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062a\u0648\u0635\u06cc\u0647\u200c\u0647\u0627:\nhttps://support.zabbix.com/browse/ZBX-27061\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\u0628\u06cc\u0627\u06cc\u06cc\u062f \u0628\u0627 \u0647\u0645 \u0627\u0633\u062a\u0627\u0646\u062f\u0627\u0631\u062f\u0647\u0627 \u0631\u0627 \u0628\u0627\u0644\u0627 \u0628\u0628\u0631\u06cc\u0645.\u00a0 \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec \u0628\u067e\u06cc\u0648\u0646\u062f\u06cc\u062f:\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t", "url": "https://t.me/ics_cert/1333"}, {"timestamp": "2025-10-06T20:45:42.250Z", "date_only": false, "value": "2025-10-06T20:45:42.250853Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m2ki6fv55c2b", "record": "CVE-2025-27237", "field": "creation_timestamp", "uuid": "a5c333a8-0790-4d6c-b475-7fec0f8793aa", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m2ki6fv55c2b"}, {"timestamp": "2025-10-07T08:14:58Z", "date_only": false, "value": "2025-10-07T08:14:58.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bhhub/1167", "record": "CVE-2025-27237", "field": "creation_timestamp", "uuid": "6121efee-a5b7-4e1d-9b24-dc622886ed97", "content": "Top exploited vulns of the Week\n\nThis week\u2019s Vulnerability Trend shows a mix of big-platform remote RCEs (Oracle EBS, DrayTek), high-impact web plugin and local network exploits (WordPress Spirit, SillyTavern), plus client/runtime abuse in widely distributed software (Unity, Zabbix agent). Notable: an enterprise-scale, pre-auth Oracle RCE is already weaponized by ransomware groups (Cl0p / GRACEFUL SPIDER) and added to CISA KEV \u2014 treat it as highest priority.\n\nQuick hit list:\n\n\u2b50\ufe0f CVE-2025-61882 \u2014 Oracle E-Business Suite (BI Publisher integration) \u2014 CVSS 9.8, pre-auth RCE, actively used by Cl0p & GRACEFUL SPIDER; on CISA KEV. Patch immediately or isolate EBS HTTP endpoints.\n\u2b50\ufe0f CVE-2025-6388 \u2014 Spirit Framework (WordPress) \u2014 CVSS 9.8, unauthenticated admin takeover. Update to 1.2.15 or remove the plugin.\n\u2b50\ufe0f CVE-2025-59159 \u2014 SillyTavern (DNS rebinding) \u2014 CVSS ~9.6, local network\u2192API key theft. Upgrade to 1.13.4 + enable host whitelist.\n\u2b50\ufe0f CVE-2025-10547 \u2014 DrayTek Vigor routers \u2014 CVSS 8.8, unauth RCE in HTTP CGI; remote root possible. Apply vendor fixes and audit external-facing routers.\n\u2b50\ufe0f CVE-2025-59489 \u2014 Unity Runtime \u2014 Arg injection / DLL hijack in apps; PoCs available; exploited via trojanized games. Treat as supply-chain / app-store risk for distributed clients.\n\u2b50\ufe0f CVE-2025-27237 \u2014 Zabbix Agent (Windows LPE) \u2014 DLL injection via writable OpenSSL path; observed in targeted ops. Harden file perms and monitor for local privilege escalations.", "url": "https://t.me/bhhub/1167"}, {"timestamp": "2026-02-26T17:48:21.215Z", "date_only": false, "value": "2026-02-26T17:48:21.215Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-27237", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-02-26T17:48:21.215Z", "date_only": false, "value": "2026-02-26T17:48:21.215Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-27237", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-20T19:00:08.084Z", "date_only": false, "value": "2026-07-20T19:00:08.084012Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/proxy_bar/3100", "record": "CVE-2025-27237", "field": "creation_timestamp", "uuid": "449b895b-db0a-4328-8468-16145012d3f0", "content": "CVE-2025-27237 \n*\nZabbix LPE PoC", "url": "https://t.me/proxy_bar/3100"}, {"timestamp": "2026-07-22T00:00:27.530Z", "date_only": false, "value": "2026-07-22T00:00:27.530610Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/3100", "record": "CVE-2025-27237", "field": "creation_timestamp", "uuid": "6df01280-21b2-46e1-afa8-bb33919135fe", "content": "CVE-2025-27237 \n*\nZabbix LPE PoC", "url": "https://t.me/proxy_bar/3100"}, {"timestamp": "2026-10-19T17:10:00.173Z", "date_only": false, "value": "2026-10-19T17:10:00.173", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-27237", "record": "FKIE_CVE-2025-27237", "field": "lastModified"}]}