CISA KEV — Known Exploited Vulnerabilities
Vulnerabilities that the US CISA has confirmed as exploited in the wild (Known Exploited Vulnerabilities), newest first, with summaries, CVSS and remediation.
| ID | Image | Title |
|---|---|---|
| CVE-2025-8875 KEV |
[KEV] Unsafe Deserialization in N-able N-Central (CVE-2025-8875)
Vulnerability in N-able N-Central (CVE-2025-8875). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-8876 KEV |
[KEV] Vulnerability in N-able N-Central (CVE-2025-8876)
Vulnerability in N-able N-Central (CVE-2025-8876). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-3893 KEV |
[KEV] Vulnerability in Microsoft Internet Explorer (CVE-2013-3893)
Vulnerability in Microsoft Internet Explorer (CVE-2013-3893). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2007-0671 KEV |
[KEV] Vulnerability in Microsoft Office (CVE-2007-0671)
Vulnerability in Microsoft Office (CVE-2007-0671). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-8088 KEV |
[KEV] Vulnerability in RARLAB WinRAR (CVE-2025-8088)
Vulnerability in RARLAB WinRAR (CVE-2025-8088). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-40799 KEV |
[KEV] Vulnerability in D-Link DNR-322L (CVE-2022-40799)
Vulnerability in D-Link DNR-322L (CVE-2022-40799). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-25079 KEV |
[KEV] Command Injection in D-Link DCS-2530L and DCS-2670L Devices (CVE-2020-25079)
Command injection in D-Link DCS-2530L and DCS-2670L Devices (CVE-2020-25079). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-25078 KEV |
[KEV] Vulnerability in D-Link DCS-2530L and DCS-2670L Devices (CVE-2020-25078)
Vulnerability in D-Link DCS-2530L and DCS-2670L Devices (CVE-2020-25078). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-20281 KEV |
[KEV] Vulnerability in Cisco Identity Services Engine (CVE-2025-20281)
Vulnerability in Cisco Identity Services Engine (CVE-2025-20281). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-20337 KEV |
[KEV] Vulnerability in Cisco Identity Services Engine (CVE-2025-20337)
Vulnerability in Cisco Identity Services Engine (CVE-2025-20337). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2023-2533 KEV |
[KEV] Cross-Site Request Forgery (CSRF) in PaperCut NG/MF (CVE-2023-2533)
Vulnerability in PaperCut NG/MF (CVE-2023-2533). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-49706 KEV |
[KEV] Authentication Bypass in Microsoft SharePoint (CVE-2025-49706)
Authentication bypass in Microsoft SharePoint (CVE-2025-49706). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-49704 KEV |
[KEV] Code Injection in Microsoft SharePoint (CVE-2025-49704)
Code injection in Microsoft SharePoint (CVE-2025-49704). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-54309 KEV |
[KEV] Vulnerability in CrushFTP (CVE-2025-54309)
Vulnerability in CrushFTP (CVE-2025-54309). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-6558 KEV |
[KEV] Vulnerability in Google Chrome (CVE-2025-6558)
Vulnerability in Google Chrome (CVE-2025-6558). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-2776 KEV |
[KEV] XXE (XML External Entity) in SysAid On-Prem (CVE-2025-2776)
Vulnerability in SysAid On-Prem (CVE-2025-2776). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-2775 KEV |
[KEV] XXE (XML External Entity) in SysAid On-Prem (CVE-2025-2775)
Vulnerability in SysAid On-Prem (CVE-2025-2775). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-53770 KEV |
[KEV] Unsafe Deserialization in Microsoft SharePoint (CVE-2025-53770)
Vulnerability in Microsoft SharePoint (CVE-2025-53770). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-25257 KEV |
[KEV] SQL Injection in Fortinet FortiWeb (CVE-2025-25257)
SQL injection in Fortinet FortiWeb (CVE-2025-25257). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-47812 KEV |
[KEV] Vulnerability in Wing FTP Server (CVE-2025-47812)
Vulnerability in Wing FTP Server (CVE-2025-47812). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-5777 KEV |
[KEV] Out-of-Bounds Read in Citrix NetScaler ADC and Gateway (CVE-2025-5777)
Vulnerability in Citrix NetScaler ADC and Gateway (CVE-2025-5777). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
|
| CVE-2014-3931 KEV |
[KEV] Buffer Overflow in Multi-Router Looking Glass (MRLG) (CVE-2014-3931)
Vulnerability in Multi-Router Looking Glass (MRLG) (CVE-2014-3931). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-10033 KEV |
[KEV] Command Injection in Phpmailer (CVE-2016-10033)
Command injection in Phpmailer (CVE-2016-10033). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-5418 KEV |
[KEV] Path Traversal in Ruby on Rails (CVE-2019-5418)
Path traversal in Ruby on Rails (CVE-2019-5418). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-9621 KEV |
[KEV] SSRF (Server-Side Request Forgery) in Synacor Zimbra Collaboration Suite Zcs (CVE-2019-9621)
SSRF in Synacor Zimbra Collaboration Suite Zcs (CVE-2019-9621). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-6554 KEV |
[KEV] Vulnerability in Google Chromium V8 (CVE-2025-6554)
Vulnerability in Google Chromium V8 (CVE-2025-6554). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-48927 KEV |
[KEV] Vulnerability in TeleMessage TM SGNL (CVE-2025-48927)
Vulnerability in TeleMessage TM SGNL (CVE-2025-48927). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-48928 KEV |
[KEV] Vulnerability in TeleMessage TM SGNL (CVE-2025-48928)
Vulnerability in TeleMessage TM SGNL (CVE-2025-48928). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-6543 KEV |
[KEV] Buffer Overflow in Citrix NetScaler ADC and Gateway (CVE-2025-6543)
Vulnerability in Citrix NetScaler ADC and Gateway (CVE-2025-6543). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-54085 KEV |
[KEV] Vulnerability in AMI MegaRAC SPx (CVE-2024-54085)
Vulnerability in AMI MegaRAC SPx (CVE-2024-54085). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-0769 KEV |
[KEV] Path Traversal in D-Link DIR-859 Router (CVE-2024-0769)
Path traversal in D-Link DIR-859 Router (CVE-2024-0769). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-6693 KEV |
[KEV] Vulnerability in Fortinet FortiOS (CVE-2019-6693)
Vulnerability in Fortinet FortiOS (CVE-2019-6693). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
|
| CVE-2023-0386 KEV |
[KEV] Vulnerability in Linux Kernel (CVE-2023-0386)
Vulnerability in Linux Kernel (CVE-2023-0386). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-43200 KEV |
[KEV] Vulnerability in Apple Multiple Products (CVE-2025-43200)
Vulnerability in Apple Multiple Products (CVE-2025-43200). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2023-33538 KEV |
[KEV] Command Injection in TP-Link Multiple Routers (CVE-2023-33538)
Command injection in TP-Link Multiple Routers (CVE-2023-33538). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-24016 KEV |
[KEV] Unsafe Deserialization in Wazuh Server (CVE-2025-24016)
Vulnerability in Wazuh Server (CVE-2025-24016). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-33053 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2025-33053)
Vulnerability in Microsoft Windows (CVE-2025-33053). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-32433 KEV |
[KEV] Vulnerability in Erlang/OTP (CVE-2025-32433)
Vulnerability in Erlang/OTP (CVE-2025-32433). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-42009 KEV |
[KEV] Cross-Site Scripting (XSS) in Roundcube Webmail (CVE-2024-42009)
Cross-site scripting in Roundcube Webmail (CVE-2024-42009). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-5419 KEV |
[KEV] Out-of-Bounds Read in Google Chromium V8 (CVE-2025-5419)
Vulnerability in Google Chromium V8 (CVE-2025-5419). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-27038 KEV |
[KEV] Use-After-Free in Qualcomm Multiple Chipsets (CVE-2025-27038)
Vulnerability in Qualcomm Multiple Chipsets (CVE-2025-27038). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-21480 KEV |
[KEV] Authorization Flaw in Qualcomm Multiple Chipsets (CVE-2025-21480)
Vulnerability in Qualcomm Multiple Chipsets (CVE-2025-21480). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-21479 KEV |
[KEV] Authorization Flaw in Qualcomm Multiple Chipsets (CVE-2025-21479)
Vulnerability in Qualcomm Multiple Chipsets (CVE-2025-21479). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2023-39780 KEV |
[KEV] OS Command Injection in ASUS RT-AX55 Routers (CVE-2023-39780)
OS command injection in ASUS RT-AX55 Routers (CVE-2023-39780). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-56145 KEV |
[KEV] Code Injection in Craft CMS (CVE-2024-56145)
Code injection in Craft CMS (CVE-2024-56145). Risk of unauthorized operations or information disclosure. Exploitable via register_argc_argv. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-35939 KEV |
[KEV] Vulnerability in Craft CMS (CVE-2025-35939)
Vulnerability in Craft CMS (CVE-2025-35939). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-3935 KEV |
[KEV] Authentication Bypass in ConnectWise ScreenConnect (CVE-2025-3935)
Authentication bypass in ConnectWise ScreenConnect (CVE-2025-3935). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-32030 KEV |
[KEV] Authentication Bypass in ASUS Routers (CVE-2021-32030)
Authentication bypass in ASUS Routers (CVE-2021-32030). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-4632 KEV |
[KEV] Path Traversal in Samsung MagicINFO 9 Server (CVE-2025-4632)
Path traversal in Samsung MagicINFO 9 Server (CVE-2025-4632). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-4427 KEV |
[KEV] Vulnerability in Ivanti Endpoint Manager Mobile (EPMM) (CVE-2025-4427)
Vulnerability in Ivanti Endpoint Manager Mobile (EPMM) (CVE-2025-4427). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
