CERT Polska has received a report about 4 vulnerabilities (from CVE-2025-66049 to CVE-2025-66052) found in Vivotek IP7137 camera.

Use of Hard-coded Credentials vulnerability (CVE-2025-7072) has been found in firmware of KAON routers CG3000T and CG3000TC.

An issue allowing unauthorized access to medical records (CVE-2025-4596) was found in Asseco AMDX software.

CERT Polska has received a report about 2 vulnerabilities (CVE-2025-8306 and CVE-2025-8307) found in Asseco InfoMedica Plus software.

Command Injection vulnerability (CVE-2025-6225) has been found in Kieback&Peter Neutrino-GLT software.

CERT Polska has received a report about 5 vulnerabilities (from CVE-2025-65007 to CVE-2025-65011) found in WODESYS WD-R608U router.

Authorization Bypass Through User-Controlled Key vulnerability (CVE-2025-10910) has been found in Govee devices with cloud connectivity firmware.

CERT Polska has received a report about 3 vulnerabilities (from CVE-2025-65074 to CVE-2025-65076) found in WaveStore Server software.

SQL Injection vulnerability (CVE-2025-12465) has been found in OpenSolution QuickCMS software.

Remote Code Execution vulnerability (CVE-2025-12140) has been found in Wirtualna Uczelnia software.