Source: SecurityWeek
The exploitation of CVE-2025-10035 demonstrates the vulnerabilities present in popular file transfer solutions. A threat actor managed to exploit this weakness just eight days before patches were made available, highlighting the risks associated with delayed updates.
The creation of a backdoor admin account poses serious risks to organizations relying on this software. It allows unauthorized access to sensitive data, potentially leading to data breaches or exploitation of further vulnerabilities, which in turn could compromise entire networks. Organizations must evaluate their security measures and ensure timely updates to mitigate such risks.
👉 Pročitaj original: SecurityWeek