VulnRadar

Data against noise.

Page generated: 08 Nov 2026, 09:21 UTC

CVE-2025-24016

iPhone

Read full description

Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.9.1, an unsafe deserialization vulnerability allows for remote code execution on Wazuh servers. DistributedAPI parameters are a serialized as JSON and deserialized using `as_wazuh_object` (in `framework/wazuh/core/cluster/common.py`). If an attacker manages to inject an unsanitized dictionary in DAPI request/response, they can forge an unhandled exception (`__unhandled_exc__`) to evaluate arbitrary python code. The vulnerability can be triggered by anybody with API access (compromised dashboard or Wazuh servers in the cluster) or, in certain configurations, even by a compromised agent. Version 4.9.1 contains a fix.

CVSS 9.9 (CRITICAL) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE

8.2/10

REALITY · THREAT PRIORITY

9.0/10

General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?

Recorded exploitation baseline: +7.00
Technical severity: CVSS 9.9: +1.49
Fresh EPSS: 93.84%: +0.47

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 36 documents and public datasets.

Hype components

Headline sample (25%)

30/100

Press, 30 days (60%)

100/100

Grounded branding (15%)

100/100

HYPE TOTAL82/100

Sources and documents

PhoneArena

Press · 01 Nov 2026, 23:31 · iPhone Duo cracks are real, and Apple's 'small number' may not be so small - PhoneArena

Yahoo Finance

Press · 01 Nov 2026, 19:01 · Apple to report Q4 earnings Monday, with iPhone 18 sales in the spotlight - Yahoo Finance

Mashable

Press · 01 Nov 2026, 18:56 · T-Mobile is giving away the Apple iPhone 18 Pro for free — how to qualify - Mashable

GSMArena.com

Press · 01 Nov 2026, 18:32 · Apple’s busy week, iPhone Duo troubles and Poco X8s debut, Week 43 in review - GSMArena.com news - GSMArena.com

Mashable

Press · 01 Nov 2026, 18:04 · The Apple iPhone 17 is yours for free this weekend — how to claim - Mashable

See all 36 source documents

TechRadar

Press · 01 Nov 2026, 18:00 · I compared the iPhone Duo and iPhone Air so you don't have to - TechRadar

Gizmodo

Press · 01 Nov 2026, 17:32 · You’ll Never Guess How Scalpers Are Reportedly Snagging Rare iPhone Duos - Gizmodo

Yahoo Finance

Press · 01 Nov 2026, 17:29 · Could Apple's Latest iPhone Be Its Biggest Growth Catalyst in Years? - Yahoo Finance

The Motley Fool

Press · 01 Nov 2026, 17:09 · Could Apple's Latest iPhone Be Its Biggest Growth Catalyst in Years? - The Motley Fool

CoinDesk

Press · 01 Nov 2026, 17:00 · How a stolen iPhone in London led to drained crypto wallets and $14,000 in losses - CoinDesk

Mashable

Press · 01 Nov 2026, 16:59 · Apple iPhone Duo vs. iPhone 18 Pro: First-hand impressions, how to decide - Mashable

Engadget

Press · 01 Nov 2026, 14:45 · Which Android Is The Closest Counterpart To The iPhone 18 Pro Max? - Engadget

Tom's Guide

Press · 01 Nov 2026, 11:15 · How to instantly free up iPhone storage without deleting a single photo or app - Tom's Guide

WIRED

Press · 01 Nov 2026, 11:00 · The Hollywood Color Nerd Who Shot ‘Knives Out’ Explains His Viral iPhone Camera App - WIRED

SlashGear

Press · 01 Nov 2026, 10:45 · 5 New Foldable Phones To Consider Instead Of The iPhone Duo - SlashGear

Creative Bloq

Press · 01 Nov 2026, 09:00 · Are you team Apple or Samsung in the folding phone era? - Creative Bloq

Forbes

Press · 31 Oct 2026, 19:30 · Three Choices That Will Define Apple’s New iPhone 18e - Forbes

TechCrunch

Press · 31 Oct 2026, 14:00 · I took two iPhones on vacation. The Duo won me over. - TechCrunch

CNBC

Press · 30 Oct 2026, 16:35 · Apple responds to user reports of broken iPhone Duo screens on new foldable phone - CNBC

BGR

Press · 30 Oct 2026, 16:01 · iPhone Duo Review: The First Foldable Phone I'd Actually Switch To - BGR

PhoneArena

Press · 30 Oct 2026, 15:51 · Pixel 7 to Pixel 11 just received a massive iPhone-inspired upgrade in the latest Android 17 update - PhoneArena

Mashable

Press · 30 Oct 2026, 09:57 · T-Mobile is still giving away the Apple iPhone 17 for free — how to qualify - Mashable

Six Colors

Press · 29 Oct 2026, 15:00 · iPhone 18 Pro Review: Highest Pro price ever poses a challenge for upgraders - Six Colors

Tom's Guide

Press · 29 Oct 2026, 10:30 · 24 hours with the iPhone Duo — here are my 5 immediate takeaways - Tom's Guide

Ars Technica

Press · 27 Oct 2026, 14:20 · Apple iPhone Duo review: Two screens, two experiences, two thousand dollars - Ars Technica

Bitsight

Press · 11 Mar 2026, 07:00 · RondoDox Botnet: From Zero to 174 Exploited Vulnerabilities - Bitsight

The Hacker News

Press · 16 Jun 2025, 07:00 · ⚡ Weekly Recap: iPhone Spyware, Microsoft 0-Day, TokenBreak Hack, AI Data Leaks and More - The Hacker News

Help Net Security

Press · 10 Jun 2025, 07:00 · Unpatched Wazuh servers targeted by Mirai botnets (CVE-2025-24016) - Help Net Security

Field Effect

Press · 09 Jun 2025, 07:00 · Mirai variant targets new flaws; POC for two Windows flaws published; TA397 linked to Indian State - Field Effect

The Hacker News

Press · 09 Jun 2025, 07:00 · Two Distinct Botnets Exploit Wazuh Server Vulnerability to Launch Mirai-Based Attacks - The Hacker News

CyberSecurityNews

Press · 09 Jun 2025, 07:00 · Critical Wazuh Server RCE Vulnerability Exploited to Deploy Mirai Variants - CyberSecurityNews

Akamai

Press · 09 Jun 2025, 07:00 · Two Botnets, One Flaw: Mirai Spreads Through Wazuh Vulnerability - Akamai

SecurityWeek

Press · 09 Jun 2025, 07:00 · Mirai Botnets Exploiting Wazuh Security Platform Vulnerability - SecurityWeek

GBHackers News

Press · 17 Mar 2025, 07:00 · Wazuh SIEM Vulnerability Enables Remote Malicious Code Execution - GBHackers News

CyberSecurityNews

Press · 17 Mar 2025, 07:00 · Wazuh Open Source SIEM Vulnerability Allows Malicious Code Execution Remotely - CyberSecurityNews

CyberSecurityNews

Press · 03 Mar 2025, 08:00 · Critical Vulnerability in Wazuh Server Enables Remote Attackers to Execute Malicious Code - CyberSecurityNews

Score evolution

● Hype ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 8.2 · reality 9.0 (2026-11-02 15:13). The curve appears once the score changes.

Public exploit evidence

Public exploit entries / repo candidates

See 2 repos with metrics

Repository	Stars	Forks	Language	Updated
cybersecplayground/CVE-2025-24016-Wazuh-Remote-Code-Execution-RCE-PoC	2	0	Python	21 Apr 2025, 21:47
celsius026/poc_CVE-2025-24016	0	0	Python	15 Apr 2025, 14:27

Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence: Exploitation recorded
Priority basis: Recorded exploitation; CVSS 9.9; EPSS 93.8%
Attention, last 30 days: 25 distinct story titles; 25 press documents; 1 publisher domains.
Technical potential: network access, low privileges, no user interaction.
Observed activity: Exploitation recorded in CISA KEV.
Known scale: Not quantified.
Evidence confidence basis: Trusted exploitation confirmation

Score evaluated: 2026-11-05 13:59:30.643079+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline

Published

10 Feb 2025, 19:08

First press mention

03 Mar 2025, 08:00

Added to the CISA KEV catalog

10 Jun 2025, 00:00

Latest press mention

01 Nov 2026, 23:31

Score calculated

05 Nov 2026, 13:59

Name

iPhone

PoCs on GitHub

2 repositories