Security Bulletin: Multiple CVEs in NCP, Akamai, Tenable, Fortinet, Trend Micro

Critical Vulnerability Information Local Privilege Escalation Vulnerability in NCP Secure Enterprise Client Suite CVE: CVE-2025-50173 Severity: High (CVSS Score: 7.8) Affected Versions: All versions of Windows NCP Secure Enterprise Client Suite for Windows up to 13.33 Build 29006 Remediation: - Upgrade to a secure version - Patch code has been released Local Privilege Escalation Vulnerability in Akamai Guardicore Platform Agent CVE: CVE-2025-53841 Severity: High (CVSS Score: 7.8) Affected Versions: All current and previous versions Remediation: - Upgrade to a secure version - Patch code has been released Security Vulnerability in Tenable Nessus Windows Agent CVE: CVE-2025-36633 Severity: High (CVSS Score: 8.8) Affected Versions: All versions of Windows Tenable Nessus Agent up to 10.8.5 Remediation: - Upgrade to a secure version - Patch code has been released Security Vulnerability in Windows SDK Component CVE: CVE-2025-47962 Severity: Not disclosed Affected Versions: All currently supported versions Remediation: - Install official updates and recommendations - Patch code has been released Dradis - Information Disclosure in Output Console CVE: CVE-2023-50458 Severity: Not disclosed Affected Versions: All known versions of Dradis Pro and Community Edition up to 4.10 Remediation: - Upgrade to a secure version - Patch code has been released Security Vulnerability in Fortinet FortiExtender Application CVE: CVE-2022-23447 Severity: High (CVSS Score: 7.3) Affected Versions: FortiExtender 7.0.0 to 7.0.3, 4.2.0 to 4.2.4, 4.1.1 to 4.1.8, 4.0.0 to 4.0.2, 3.3.0 to 3.3.2, 3.2.1 to 3.2.3, and all versions of 5.3 Remediation: - Upgrade to a secure version - Patch code has been released Security Vulnerability in DATEV Personal-Managementsystem comfort/comfort plus CVE: CVE-2023-33387 Severity: Medium (CVSS Score: 6.1) Affected Versions: 15.1.0 P6 to 16.1.1 P3 Remediation: - Upgrade to a secure version - Patch code has been released ENOVIA V6 - Multiple Vulnerabilities Allowing Remote Code Execution CVE: CVE-2023-1288, CVE-2023-1287 Severity: High Affected Versions: ENOVIA V6R2013x versions Remediation: Install official patches baramundi Management Agent - Buffer Overflow Leading to Remote Code Execution CVE: CVE-2022-44654 Severity: High Affected Versions: bMS 2022 R1, bMS 2021 R2, bMS 2021 R1, and earlier versions Remediation: - Install official patches - Patch code has been released Trend Micro Apex One - Security Vulnerability in UMH Monitoring Engine Module CVE: CVE-2022-44654 Severity: High (CVSS Score: 7.5) Affected Versions: Apex One 2019 and Apex One as a Service Remediation: - Install official patches - Patch code has been released Local Privilege Escalation Vulnerability in otris "Update Manager" CVE: CVE-2021-40376 Severity: Not disclosed Affected Versions: otris Privacy v1.2.1.0 and earlier versions Remediation: - Upgrade to a secure version - Patch code has been released

Goal Reached Thanks to every supporter — we hit 100%!

Security Bulletin: Multiple CVEs in NCP, Akamai, Tenable, Fortinet, Trend Micro