Vulnerabilities

CVSS

6.9 Medium

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Risk score

55.2

Published

2025-11-12

Status

Published

N-central < 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4.

Weaknesses

CWE-1284

Coverage 1

threat-intel

Iran-Linked Hackers Use New Cavern C2 Framework to Target Israeli Organizations

Iranian hackers, linked to Iran's Ministry of Intelligence and Security (MOIS) and operating under the moniker Cavern Manticore, are utilizing a new, modular command-and-control (C2) framework called ‘Cavern’ to target I…

The Hacker News · Jul 6, 2026 High

CVE-2025-52691CVE-2025-68613CVE-2025-9316ISIRc2command and controldotnet

All articles mentioning it

Advisories and references

• me.n-able.com/s/security-advisory/aArVy0000000rdpKAA/cve20259316-nce...