Loading story…
CISA has issued a warning regarding critical vulnerabilities in Dover Fueling Solutions’ ProGauge MagLink LX. These flaws could potentially allow attackers to compromise fuel management systems. Organizations using these systems should review CISA's advisory and apply mitigations immediately.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
6 events from the most recent confirmed update back to the earliest known activity.
Cisco's SNMP vulnerability CVE-2025-20352 was reported as being actively exploited, with attackers potentially able to gain root access. The report also emphasized that patches were available and should be applied urgently.
Check Point Research published its 22 September threat intelligence report summarizing current threat activity and notable security developments. This served as a periodic intelligence update rather than a single incident disclosure.
A critical Microsoft Entra ID vulnerability, CVE-2025-55241, was publicly reported as having the potential to compromise tenants at massive scale. The disclosure highlighted the severity of the issue with a CVSS 10.0 rating.
Researchers disclosed proof-of-concept exploit details for CVE-2025-41243, a critical Spring Cloud Gateway vulnerability rated CVSS 10.0. The release provided technical information that could enable attackers and defenders alike to validate exposure.
A proof-of-concept exploit was released for CVE-2025-9961, a TP-Link router vulnerability that could allow remote code execution. The publication of exploit details increased the practical risk of exploitation.
CISA issued a warning about critical vulnerabilities affecting Dover Fueling Solutions' ProGauge MagLink LX product. The alert marked the public disclosure of the issue and urged defenders to assess exposure and mitigations.
7 references tracked. Mallory keeps watching after this page renders.
securityonline.info
Open sourcesecurityonline.info
Open sourcesecurityonline.info
Open sourcesecurityonline.info
Open sourceresearch.checkpoint.com
Open sourcesecurityonline.info
Open sourcesecurityonline.info
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Multiple critical vulnerabilities have been identified in Dover Fueling Solutions ProGauge MagLink LX4 devices, including integer overflow, use of hard-coded cryptographic keys, and weak credentials. These flaws could allow remote attackers to cause denial-of-service or gain administrative access. No public exploitation has been reported, but immediate mitigation is advised.
Jun 29, 2026
A critical command injection vulnerability, tracked as CVE-2025-58428, has been identified in the Veeder-Root TLS4B Automatic Tank Gauge (ATG) System. The flaw resides in the system's SOAP-based web services interface, which allows remote attackers with valid credentials to execute arbitrary system-level commands on the underlying Linux operating system. Successful exploitation could grant attackers full shell access, enable remote command execution, and facilitate lateral movement within affected networks, posing a significant risk to organizations relying on these systems for fuel management and monitoring. Security advisories highlight that all versions of the TLS4B system prior to 11.A are affected. In addition to the command injection issue, the system is also vulnerable to an integer overflow related to Unix time handling, which could cause system resets after the 2038 epoch rollover. The vulnerabilities are rated as critical, with CVSS scores of 9.9 (v3.1) and 9.4 (v4), and could result in denial of service, administrative lockout, or disruption of core functionalities if exploited. Organizations are urged to review vendor guidance and apply mitigations to protect against these threats.
Jun 29, 2026
CISA released a coordinated set of advisories detailing newly discovered vulnerabilities affecting a range of industrial control system (ICS) products from vendors including Advantech, Johnson Controls, Mitsubishi Electric, and SolisCloud. The vulnerabilities include a critical SQL injection flaw in Advantech iView (CVE-2025-13373), improper certificate expiration validation in Johnson Controls iSTAR (CVE-2025-61736), cleartext storage of sensitive information in Mitsubishi Electric GX Works2 (CVE-2025-3784), a forced browsing vulnerability in Johnson Controls OpenBlue Mobile Web Application (CVE-2025-26381), and an authorization bypass in SolisCloud Monitoring Platform (CVE-2025-13932). These flaws could allow attackers to access or modify sensitive data, disrupt communications, or gain unauthorized access to critical infrastructure systems. CISA's advisories provide technical details, affected product versions, and recommended mitigations, such as software updates and network segmentation, to reduce the risk of exploitation. The vulnerabilities impact products deployed globally across sectors such as critical manufacturing, energy, commercial facilities, and government services. Some advisories note that fixes are available, while others indicate that patches are still under development or that vendors have not responded to coordination efforts. CISA urges organizations using these products to review the advisories and implement recommended mitigations to protect against potential attacks targeting these ICS environments.
Jun 29, 2026