CVE-2025-61932Critical· 9.8▾ Hadal⚠ Exploited in the wildLanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets.
▾ Hadal zone — Critical and actively exploited (CISA KEV / 0day)
impact 53.9 · likelihood 0.6 · exploitation 25
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Federal remediation due Nov 12, 2025
Last analysed / modified upstream
2.8%
Added to the CISA catalog on Oct 22, 2025. Federal remediation due Nov 12, 2025. View catalog ↗
Lanscope Endpoint Manager (On-Premises) (Client program (MR) and Detection agent (DA)) improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets.
lanscope_endpoint_manager < 9.3.2.7lanscope_endpoint_manager >= 9.3.3.0, < 9.3.3.9lanscope_endpoint_manager >= 9.4.0.0, < 9.4.0.5lanscope_endpoint_manager >= 9.4.1.0, < 9.4.1.5lanscope_endpoint_manager >= 9.4.2.0, < 9.4.2.6lanscope_endpoint_manager >= 9.4.3.0, < 9.4.3.8lanscope_endpoint_manager >= 9.4.4.0, < 9.4.4.6lanscope_endpoint_manager >= 9.4.5.0, < 9.4.5.4lanscope_endpoint_manager >= 9.4.6.0, < 9.4.6.3lanscope_endpoint_manager >= 9.4.7.0, <= 9.4.7.1Upgrade past the affected range:
lanscope_endpoint_manager 9.4.6.3Connected by shared product, vendor, weakness, or advisory.
CVE-2026-89409Medium· 5.3Unvalidated ZWAVE_CMD_NODES_EXIST May Cause Deletion of End Nodes
CVE-2026-66279High· 7.2Dis-connect vulnerability in Connect Stack
CVE-2026-112408High· 8.1Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()
CVE-2026-76894Low· 3.1ckan-mcp-server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out)
CVE-2026-102551High· 7.7Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP Router Advertisement handling
CVE-2026-102552Medium· 5.9Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP DNS resolver