Summary

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has taken the necessary step to alert organizations about two newly identified security vulnerabilities in Microsoft Partner Center and Synacor Zimbra Collaboration Suite.

This move is aimed at protecting against active exploitation, which could lead to serious consequences for affected entities.One of the vulnerabilities, CVE-2024-49035, carries a CVSS score of 8.7, indicating its high severity. The flaw is related to improper access control, which can be exploited by attackers to gain unauthorized access to sensitive information or systems.To mitigate this risk, it is crucial for organizations to prioritize patching these vulnerabilities as soon as possible.

This proactive measure will help prevent potential breaches and minimize the scope of any resulting damage.

Summary

Of CVE-2025-0108 (CVSS score: 7.8)A critical authentication bypass vulnerability has been discovered in Palo Alto Networks PAN-OS, with a CVSS score of 7.8. This flaw allows attackers to bypass authentication mechanisms, potentially leading to unauthorized access to sensitive systems and data.The vulnerability's high severity underscores the importance of prompt patching and remediation measures.

Organizations that use Palo Alto Networks products must prioritize addressing this issue as soon as possible.By acknowledging this vulnerability, CISA demonstrates its commitment to protecting critical infrastructure and preventing potential cyber threats.