UCSF IT Technology

Actively Exploited, Zero Day, Critical Vulnerability in Open-Source Apache Tomcat Web Server. The vulnerability can be exploited to perform remote code execution (RCE).For a complete description of the vulnerabilities and affected systems, go to CVE-2025-24813-PoC /Tomcat_CVE-2025-24813_RCE.py.IT Security 

Gitlab released security updates to address Critical and other vulnerabilities in GitLab Community Edition (CE) and Enterprise Edition (EE). These vulnerabilities allow an authenticated attacker with access to a valid signed SAML document to impersonate another user within the same SAML Identity Provider (IdP) environment.For a complete description of the vulnerabilities and affected systems, go to GitLab Critical Patch Release: 17.9.2, 17.8.5, 17.7.7.

Juniper released security updates to address a vulnerability in Junos OS. A local attacker with access to the shell is able to inject arbitrary code which can compromise an affected device.

Cisco has released security updates to address vulnerabilities in multiple Cisco products.For a complete description of the vulnerabilities and affected systems, go to Cisco Security Advisories.IT Security Read more about IT Security service offerings.

FreeType released security updates to address an Actively Exploited Zero-Day vulnerability in FreeType. An attacker could exploit this vulnerability to perform remote code execution (RCE).For a complete description of the vulnerabilities and affected systems, go to CVE-2025-27363.IT Security Read more about IT Security service offerings.

Zoom released security updates to address High vulnerabilities in Zoom.For a complete description of the vulnerabilities and affected systems, go to Zoom Security Bulletins.IT Security Read more about IT Security service offerings.