Patch Tuesday (Expel’s version): April 2025
ID: eabe9e60-3f9a-5dad-a0a2-76d3a85b25af
STIX ID: report--eabe9e60-3f9a-5dad-a0a2-76d3a85b25af
Feed Name: Expel Blog
Threat Score
Date Published: 2025-04-08
Date Updated: 2026-04-27
Author: Ben Nahorney; Matt Jastram; Aaron Walton
...
...
**Executive summary:** The April 2025 Patch Tuesday blog covers 126 new CVEs (11 critical) including a zero-day (CVE-2025-29824) and highlights active exploitation of PHP CGI RCE (CVE-2024-4577) with observed attempts against XAMPP and thousands of scanning IPs; the post details other notable RCE and MotW bypass vulnerabilities and recommends urgent patching, WAF filtering, EDR monitoring, and deprecation/removal of CGI usage.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.