CISA Warns: CVE-2025-1316 & 2 More Bugs Under Attack

This report details three CISA-listed vulnerabilities: CVE-2025-1316 (critical OS command injection in Edimax IC-7100 IP cameras, CVSS v4 9.3), CVE-2024-48248 (absolute path traversal in NAKIVO Backup & Replication), and CVE-2017-12637 (directory traversal in SAP NetWeaver). CISA warns these flaws can enable remote code execution, unauthorized file access, or data leakage and recommends immediate patching, network isolation, firewall/VPN protections, and access-control audits to mitigate risk.