Patch/Configuration Management

A malicious extension could have injected code into the panel to escalate its privileges.

Trend Micro has issued fixes for two critical remote code execution flaws in the Apex One management console, according to Security Affairs.

The vulnerability affects specific versions of Junos OS Evolved on PTX Series routers, which are high-performance core and peering routers crucial for internet service providers, telecommunication services, and cloud network applications.

VulnCheck Vice President of Security Research Caitlin Condon said that vulnerability management prioritization remains a challenge among defenders, particularly as only 1% of over 40,000 of the disclosed vulnerabilities last year were exploited in the wild, according to CyberScoop.

The Hacker News reports that Anthropic's Claude Code has been impacted by a trio of now-addressed security flaws, which could have been harnessed to enable remote code execution and API credential compromise.

The vulnerability, tracked as CVE-2025-13942, is a command injection flaw within the UPnP function of various Zyxel CPE and extender models.

The vulnerability is an operating system command injection flaw (CWE-78) that allows an authenticated user to execute arbitrary commands via specially crafted HTTP requests.