Attackers exploit critical Flowise flaw CVE-2025-59528 for remote code execution
2026-04-07T20:51:53Z•4cb23c894026a487e7609faef1ff6f4083c0a1dda43629f91e6a775706958fb4
cisaexposed-assetsgpu-exploitincident-responseknown-exploited-vulnerabilitiesnation-statephishingprivilege-escalationransomwarerceremote-code-executionrowhammerthreat-actor-activityzero-day
What happened
This feed highlights multiple high‑impact incidents and actively exploited vulnerabilities: a critical Flowise RCE (CVE-2025-59528, CVSS 10) is being weaponized for remote code execution and filesystem access; a critical F5 BIG-IP APM RCE (CVE-2025-53521, CVSS 9.8) is being exploited across ~14,000 exposed instances; and a high-severity Fortinet FortiClient EMS flaw (CVE-2026-35616, CVSS 9.1) was added to CISA’s Known Exploited Vulnerabilities list with out‑of‑band patches issued. Also reported: an unpatched Windows local privilege escalation “BlueHammer” zero-day (publicly disclosed), GPUBREa
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 4cb23c894026a487e7609faef1ff6f4083c0a1dda43629f91e6a775706958fb4
- Enrichment time
- 2026-04-07T20:51:53Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.