Actively exploited vulnerabilities affecting Srimax products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2025-27920https://wildfortech.com/security#CVE-2025-27920This directory traversal flaw in Output Messenger, a workplace messaging platform, lets an attacker step outside the application's intended file boundaries to read arbitrary files on the server — including configuration files that may contain credentials or sensitive settings. Notably, the vulnerability was exploited as a zero-day by a threat actor tracked as Marbled Dust in a regional espionage campaign, meaning real-world, targeted attacks occurred before a fix was publicly available.Mon, 19 May 2025 00:00:00 GMTSrimaxOutput Messenger