{"vulnerability": "cve-2025-5807", "sightings": [{"uuid": "037cfe23-92dd-411c-a0fc-e9340c23be3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-58071", "type": "seen", "source": "https://circl.lu/pub/tr-96/", "content": "", "creation_timestamp": "2025-10-16T09:05:24.176000Z"}, {"uuid": "86c7f91d-b66e-48d3-9139-018dddc8fda9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58075", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115384306610090625", "content": "", "creation_timestamp": "2025-10-16T14:26:36.309725Z"}, {"uuid": "5d35329e-b201-4df0-900f-447621774214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58073", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115384314853546688", "content": "", "creation_timestamp": "2025-10-16T14:28:42.059195Z"}, {"uuid": "eab2b9a5-06bb-4cf9-94ca-a3cf5f798c17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58078", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-01", "content": "", "creation_timestamp": "2025-10-23T10:00:00.000000Z"}, {"uuid": "9691647b-3308-42c9-bb2b-f95023a24c11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58078", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m3vj7hdql22c", "content": "", "creation_timestamp": "2025-10-23T23:28:37.536997Z"}, {"uuid": "2de5ef9d-4ac1-4f28-acc3-6bc6d84c13df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58077", "type": "seen", "source": "https://infosec.place/objects/3c67cba4-e40f-42c2-8c4b-284816d64d00", "content": "", "creation_timestamp": "2026-03-16T17:00:57.675570Z"}, {"uuid": "38829701-48cd-40d9-8675-91713cd828ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-58071", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/834a30cc-c06c-49b3-9157-eb77f711c73f", "content": "", "creation_timestamp": "2025-10-15T15:31:29.212143Z"}, {"uuid": "7ef64c16-af4b-405a-b23e-47ab64f27d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58074", "type": "seen", "source": "https://infosec.place/objects/c4d2a630-d7a7-4aec-8d67-edb179d788e1", "content": "New vulnerability report from Talos:Norton Secure VPN Installation Insecure Operation On Junction Privilege Escalation Vulnerabilityhttps://talosintelligence.com/vulnerability_reports/TALOS-2025-2276CVE-2025-58074", "creation_timestamp": "2026-05-04T13:30:05.545031Z"}, {"uuid": "64f2fc79-e0a3-4f1e-9371-bcee021c2156", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58074", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkzuw6b6ps2r", "content": "CVE-2025-58074 - Norton Secure VPN Microsoft Store Privilege Escalation Vulnerability\nCVE ID : CVE-2025-58074\n \n Published : May 4, 2026, 1:11 p.m. | 1\u00a0hour, 9\u00a0minutes ago\n \n Description : A privilege escalation vulnerability exists during the installation of Norton Secure VPN...", "creation_timestamp": "2026-05-04T14:26:44.458742Z"}, {"uuid": "73f404cb-87bd-41ab-9e6a-1bdf7e8469ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58074", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkzvjhh6an2s", "content": "\ud83d\udfe0 CVE-2025-58074 - High (8.8)\n\nA privilege escalation vulnerability exists during the installation of Norton Secure VPN via the ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2025-58074/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-04T14:37:31.880648Z"}, {"uuid": "1b6ca591-4104-46d9-9744-e9580cfcd03d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58074", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3ml23xr6p4p2k", "content": "Norton Secure VPN\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u6642\u3001\u4f4e\u7279\u6a29\u30e6\u30fc\u30b6\u30fc\u304c\u30d5\u30a1\u30a4\u30eb\u3092\u7f6e\u63db\u3057\u4efb\u610f\u30d5\u30a1\u30a4\u30eb\u3092\u524a\u9664\u3059\u308b\u3053\u3068\u3067\u7279\u6a29\u6607\u683c\u306e\u8106\u5f31\u6027\u304c\u3042\u308b\u3002\u653b\u6483\u8005\u306f\u3053\u308c\u306b\u3088\u308a\u7279\u6a29\u6607\u683c\u304c\u53ef\u80fd\u3068\u306a\u308b\u3002\nCVE-2025-58074 CVSS 8.8 | HIGH", "creation_timestamp": "2026-05-04T16:32:54.250505Z"}, {"uuid": "a9882c84-eddc-4fec-9e52-979409049b16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58074", "type": "seen", "source": "https://t.me/shimiscyberworld/1197", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-04\n\n\ud83d\udcca 31 vulnerabilities detected today \u2014 20 \ud83d\udd34 Critical, 11 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-42809 (9.9) \u2014 CVE-2026-42809: Apache Polaris Critical Credential\u2026\n  \u2022 CVE-2026-42810 (9.9) \u2014 CVE-2026-42810: Apache Polaris S3 Wildcard Vulnerability\u2026\n  \u2022 CVE-2026-42811 (9.9) \u2014 CVE-2026-42811: Apache Polaris Credential Bypass Exposes\u2026\n  \u2022 CVE-2026-42812 (9.9) \u2014 Apache Iceberg CVE-2026-42812 Bypasses Metadata Location\u2026\n  \u2022 CVE-2026-24118 (9.8) \u2014 VM2 Sandbox Breakout Vulnerability: Critical Flaw Exposes\u2026\n  \u2022 CVE-2026-24120 (9.8) \u2014 CVE-2026-24120: vm2 Sandbox Escape Allows Host Command\u2026\n  \u2022 CVE-2026-24781 (9.8) \u2014 VM2 Sandbox Escape Vulnerability (CVE-2026-24781) Exposes\u2026\n  \u2022 CVE-2026-26332 (9.8) \u2014 vm2 Sandbox Escape (CVE-2026-26332) Exposes Node.js Apps to\u2026\n  \u2026 and 12 more\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2025-58074 (8.8) \u2014 Norton Secure VPN Privilege Escalation via Microsoft Store\u2026\n  \u2022 CVE-2026-6266 (8.3) \u2014 CVE-2026-6266: AAP Gateway Email Auto-Link Flaw Allows\u2026\n  \u2022 CVE-2026-29004 (8.1) \u2014 BusyBox udhcpc6 Heap Overflow (CVE-2026-29004) Exposes\u2026\n  \u2022 CVE-2026-42084 (8.1) \u2014 CVE-2026-42084: OpenC3 COSMOS Allows Password Change\u2026\n  \u2022 CVE-2026-32834 (7.5) \u2014 CVE-2026-32834: WordPress Easy PayPal Plugin Authentication\u2026\n  \u2022 CVE-2026-41471 (7.5) \u2014 CVE-2026-41471: PayPal Events WordPress Plugin Exposes All\u2026\n  \u2022 CVE-2026-25863 (7.5) \u2014 CVE-2026-25863: WordPress Plugin DoS Vulnerability Hits\u2026\n  \u2022 CVE-2026-42151 (7.5) \u2014 Prometheus Azure AD OAuth Secret Exposed via Plaintext\u2026\n  \u2022 CVE-2026-42154 (7.5) \u2014 Prometheus CVE-2026-42154: Unauthenticated Memory\u2026\n  \u2022 CVE-2026-3120 (7.2) \u2014 SambaBox CVE-2026-3120: High-Severity OS Command Injection\n  \u2026 and 1 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:16.885253Z"}]}