Cisco Systems has issued a critical advisory for a command injection vulnerability (CVE-2025-20161) affecting Nexus 3000 and 9000 Series Switches in standalone NX-OS mode. Attackers with admin access can execute arbitrary commands, posing risks of data exfiltration or service disruption. Cisco urges prompt upgrades and recommends verifying software integrity to mitigate risks.

IXON VPN Vulnerabilities Let Attackers Gain Access to Windows & Linux Systems
A security assessment by Shelltrail revealed three critical vulnerabilities in the IXON VPN client, allowing privilege escalation on Windows and Linux. Identified as CVE-2025-ZZZ-01, CVE-2025-ZZZ-02,