{"metadata": {"vulnerability": "CVE-2025-1732", "count": 34, "kinds": {"milestone": 5, "sighting": 17, "kev": 0, "other": 12}}, "data": [{"timestamp": "2025-02-27T03:13:45.776Z", "date_only": false, "value": "2025-02-27T03:13:45.776Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-1732", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-04-21T22:00:00Z", "date_only": false, "value": "2025-04-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0855", "record": "WID-SEC-W-2025-0855", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-04-21T22:00:00Z", "date_only": false, "value": "2025-04-21T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0855", "record": "WID-SEC-W-2025-0855", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-04-21T22:00:00Z", "date_only": false, "value": "2025-04-21T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0855", "record": "WID-SEC-W-2025-0855", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-04-21T22:00:00Z", "date_only": false, "value": "2025-04-21T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0855", "record": "WID-SEC-W-2025-0855", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-04-22T01:57:35.395Z", "date_only": false, "value": "2025-04-22T01:57:35.395Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-1732", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-04-22T03:02:52Z", "date_only": false, "value": "2025-04-22T03:02:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12790", "record": "CVE-2025-1732", "field": "creation_timestamp", "uuid": "2c0df224-3d79-4eea-91c0-11286da83207", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1732\n\ud83d\udd25 CVSS Score: 6.7 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: An improper privilege management vulnerability in the recovery function of the USG FLEX H series uOS firmware version V1.31 and earlier could allow an authenticated local attacker with administrator privileges to upload a crafted configuration file and escalate privileges on a vulnerable device.\n\ud83d\udccf Published: 2025-04-22T01:57:35.395Z\n\ud83d\udccf Modified: 2025-04-22T01:57:35.395Z\n\ud83d\udd17 References:\n1. https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-incorrect-permission-assignment-and-improper-privilege-management-vulnerabilities-in-usg-flex-h-series-firewalls-04-22-2025", "url": "https://t.me/DarkWebInformer_CVEAlerts/12790"}, {"timestamp": "2025-04-22T03:15:21Z", "date_only": false, "value": "2025-04-22T03:15:21Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7WF3-PQ8R-XWWQ", "record": "GHSA-7WF3-PQ8R-XWWQ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-04-22T03:15:21.337Z", "date_only": false, "value": "2025-04-22T03:15:21.337", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-1732", "record": "FKIE_CVE-2025-1732", "field": "published"}, {"timestamp": "2025-04-22T03:30:26Z", "date_only": false, "value": "2025-04-22T03:30:26Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7WF3-PQ8R-XWWQ", "record": "GHSA-7WF3-PQ8R-XWWQ", "field": "published"}, {"timestamp": "2025-04-22T03:30:26Z", "date_only": false, "value": "2025-04-22T03:30:26Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7WF3-PQ8R-XWWQ", "record": "GHSA-7WF3-PQ8R-XWWQ", "field": "modified"}, {"timestamp": "2025-04-22T05:51:43Z", "date_only": false, "value": "2025-04-22T05:51:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/23479", "record": "CVE-2025-1732", "field": "creation_timestamp", "uuid": "3b843b31-a392-4616-b35f-633b8827e216", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1732 - \"Fortinet USG FLEX H Series Privilege Escalation Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-1732 \nPublished : April 22, 2025, 3:15 a.m. | 35\u00a0minutes ago \nDescription : An improper privilege management vulnerability in the recovery function of the USG FLEX H series uOS firmware version V1.31 and earlier could allow an authenticated local attacker with administrator privileges to upload a crafted configuration file and escalate privileges on a vulnerable device. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/23479"}, {"timestamp": "2025-04-22T06:11:45.883Z", "date_only": false, "value": "2025-04-22T06:11:45.883349Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-8e663f79-45a3417748370530", "record": "CVE-2025-1732", "field": "creation_timestamp", "uuid": "7f7c43a5-54db-4e81-8e61-f14954484459", "url": "https://poliverso.org/objects/0477a01e-8e663f79-45a3417748370530"}, {"timestamp": "2025-04-22T07:04:41.667Z", "date_only": false, "value": "2025-04-22T07:04:41.667865Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnf4gm6mo32b", "record": "CVE-2025-1732", "field": "creation_timestamp", "uuid": "56f8837e-fc72-4dac-950e-820b1226f8ae", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnf4gm6mo32b"}, {"timestamp": "2025-04-22T10:09:19.217Z", "date_only": false, "value": "2025-04-22T10:09:19.217+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0855", "record": "WID-SEC-W-2025-0855", "field": "document.tracking.generator.date"}, {"timestamp": "2025-04-23T03:56:06.880Z", "date_only": false, "value": "2025-04-23T03:56:06.880791Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-1732", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-23T03:56:06.880Z", "date_only": false, "value": "2025-04-23T03:56:06.880791Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-1732", "record": "FKIE_CVE-2025-1732", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-23T17:03:09.723Z", "date_only": false, "value": "2025-04-23T17:03:09.723027Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lniodnr2gz2z", "record": "CVE-2025-1732", "field": "creation_timestamp", "uuid": "6adcdc4e-0067-4aa9-949d-913f638d0e51", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lniodnr2gz2z"}, {"timestamp": "2025-04-24T00:43:13.818Z", "date_only": false, "value": "2025-04-24T00:43:13.818932Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lnji2e7ugn2g", "record": "CVE-2025-1732", "field": "creation_timestamp", "uuid": "d746bc42-e472-49bd-977c-a598c93e9cd8", "url": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lnji2e7ugn2g"}, {"timestamp": "2025-04-24T01:09:33.278Z", "date_only": false, "value": "2025-04-24T01:09:33.278996Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3lnjjjgyifn2u", "record": "CVE-2025-1732", "field": "creation_timestamp", "uuid": "1b2d2bf2-545e-47c7-b1ff-5237a7d6b4f3", "url": "https://bsky.app/profile/r-netsec.bsky.social/post/3lnjjjgyifn2u"}, {"timestamp": "2025-04-24T08:41:53.247Z", "date_only": false, "value": "2025-04-24T08:41:53.247924Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lnkcsbiupb2j", "record": "CVE-2025-1732", "field": "creation_timestamp", "uuid": "a7b3295f-1760-4136-b0e8-d401144a3e87", "url": "https://bsky.app/profile/buherator.bsky.social/post/3lnkcsbiupb2j"}, {"timestamp": "2025-04-24T09:30:30Z", "date_only": false, "value": "2025-04-24T09:30:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TopCyberTechNews/463", "record": "CVE-2025-1732", "field": "creation_timestamp", "uuid": "24dd1b47-05e3-42e9-982f-d0b0b0034be8", "content": "Top Security News for Today\n\nLocal privilege escalation on Zyxel USG FLEX H Series (CVE-2025-1731)  \nhttps://www.reddit.com/r/netsec/comments/1k5roqe/local_privilege_escalation_on_zyxel_usg_flex_h/\n\nRegulating AI Behavior with a Hypervisor  \nhttps://www.schneier.com/blog/archives/2025/04/regulating-ai-behavior-with-a-hypervisor.html\n\nUnderstanding the threat landscape for Kubernetes and containerized assets  \nhttps://www.microsoft.com/en-us/security/blog/2025/04/23/understanding-the-threat-landscape-for-kubernetes-and-containerized-assets/\n\nXRP Supplychain attack: Official NPM package infected with crypto stealing backdoor  \nhttps://www.reddit.com/r/netsec/comments/1k54dna/xrp_supplychain_attack_official_npm_package/\n\nDOGE Worker\u2019s Code Supports NLRB Whistleblower  \nhttps://krebsonsecurity.com/2025/04/doge-workers-code-supports-nlrb-whistleblower/\n\nAuthenticated Remote Code Execution on USG FLEX H Series (CVE-2025-1731 / CVE-2025-1732)  \nhttps://www.reddit.com/r/netsec/comments/1k6f52p/authenticated_remote_code_execution_on_usg_flex_h/\n\nOperation SyncHole: Lazarus APT goes back to the well  \nhttps://securelist.com/operation-synchole-watering-hole-attacks-by-lazarus/116326/\n\nScams 2.0: How Technology Is Powering the Next Generation of Fraud  \nhttps://www.tripwire.com/state-of-security/scams-how-technology-powering-next-generation-fraud\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman", "url": "https://t.me/TopCyberTechNews/463"}, {"timestamp": "2025-06-12T07:05:39.793Z", "date_only": false, "value": "2025-06-12T07:05:39.793Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Zyxel", "record": "CVE-2025-1732", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-21T06:59:37.471Z", "date_only": false, "value": "2025-10-21T06:59:37.471476Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-5744fe79-a6c56f6f2dd16a71", "record": "CVE-2025-1732", "field": "creation_timestamp", "uuid": "1213116b-103c-44ab-8096-a883b2acca2a", "url": "https://poliverso.org/objects/0477a01e-5744fe79-a6c56f6f2dd16a71"}, {"timestamp": "2026-02-26T18:28:08.391Z", "date_only": false, "value": "2026-02-26T18:28:08.391Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-1732", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-02-26T18:28:08.391Z", "date_only": false, "value": "2026-02-26T18:28:08.391Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-1732", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T08:39:40.913Z", "date_only": false, "value": "2026-06-17T08:39:40.913", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-1732", "record": "FKIE_CVE-2025-1732", "field": "lastModified"}, {"timestamp": "2026-07-20T22:00:04.082Z", "date_only": false, "value": "2026-07-20T22:00:04.082667Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/358", "record": "CVE-2025-1732", "field": "creation_timestamp", "uuid": "025cb165-5baf-4981-9a09-1ae27f18b95f", "url": "https://t.me/pphm_HackerNews/358"}, {"timestamp": "2026-07-21T00:00:10.373Z", "date_only": false, "value": "2026-07-21T00:00:10.373290Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/358", "record": "CVE-2025-1732", "field": "creation_timestamp", "uuid": "4b6f145a-0b29-40ba-8632-b5374aef532f", "url": "https://t.me/pphm_HackerNews/358"}, {"timestamp": "2026-07-29T12:02:03.922Z", "date_only": false, "value": "2026-07-29T12:02:03.922842Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/5134", "record": "CVE-2025-1732", "field": "creation_timestamp", "uuid": "29d1999a-1c09-4295-a204-96e02ad7c4d0", "url": "https://t.me/reverseame/5134"}, {"timestamp": "2026-07-30T00:02:15.010Z", "date_only": false, "value": "2026-07-30T00:02:15.010761Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/5134", "record": "CVE-2025-1732", "field": "creation_timestamp", "uuid": "14449bd4-540b-42e3-9b9b-de2ff7b3d5cf", "url": "https://t.me/reverseame/5134"}, {"timestamp": "2026-08-02T02:00:04.146Z", "date_only": false, "value": "2026-08-02T02:00:04.146601Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/5134", "record": "CVE-2025-1732", "field": "creation_timestamp", "uuid": "48f77a82-3c63-4cd6-b3ab-e9e26f3eaf92", "url": "https://t.me/reverseame/5134"}, {"timestamp": "2026-08-03T02:14:13.255Z", "date_only": false, "value": "2026-08-03T02:14:13.255485Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/5134", "record": "CVE-2025-1732", "field": "creation_timestamp", "uuid": "b4939f5d-cb9a-4346-b80c-edad59cad6c0", "url": "https://t.me/reverseame/5134"}, {"timestamp": "2026-08-14T16:00:17.067Z", "date_only": false, "value": "2026-08-14T16:00:17.067215Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/564", "record": "CVE-2025-1732", "field": "creation_timestamp", "uuid": "d4e7a805-cd42-4f46-b3f9-f6cacf0cd52e", "url": "https://t.me/purp_sec/564"}]}