SysAid Software Security Scare: Federal Agencies Race to Patch Critical Flaws
SysAid IT support software has been caught with its digital pants down, as CISA adds two vulnerabilities to its Known Exploited Vulnerabilities catalog. With a CVSS score of 9.3, these flaws could let attackers take over admin accounts. To all SysAid users, consider this your cue to patch up before hackers crash your IT party!
Hot Take:
SysAid’s IT support software has decided to moonlight as a Swiss cheese impersonator, with CISA adding two new holes to their Known Exploited Vulnerabilities catalog. These vulnerabilities are so attractive, they might as well be on a dating app for cybercriminals. SysAdmins, it’s time to patch things up — literally!
Key Points:
– CISA adds CVE-2025-2775 and CVE-2025-2776 to the Known Exploited Vulnerabilities list.
– Both vulnerabilities have a CVSS score of 9.3, indicating critical severity.
– Vulnerabilities allow administrator account takeover and file reading.
– SysAid released a patch addressing these vulnerabilities in March 2025.
– Federal agencies must apply fixes by August 12, 2025.