CISA KEV — Known Exploited Vulnerabilities
Vulnerabilities that the US CISA has confirmed as exploited in the wild (Known Exploited Vulnerabilities), newest first, with summaries, CVSS and remediation.
| ID | Image | Title |
|---|---|---|
| CVE-2025-4428 KEV |
[KEV] Code Injection in Ivanti Endpoint Manager Mobile (EPMM) (CVE-2025-4428)
Code injection in Ivanti Endpoint Manager Mobile (EPMM) (CVE-2025-4428). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-11182 KEV |
[KEV] Cross-Site Scripting (XSS) in MDaemon Email Server (CVE-2024-11182)
Cross-site scripting in MDaemon Email Server (CVE-2024-11182). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-27920 KEV |
[KEV] Path Traversal in Srimax Output Messenger (CVE-2025-27920)
Path traversal in Srimax Output Messenger (CVE-2025-27920). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-27443 KEV |
[KEV] Cross-Site Scripting (XSS) in Synacor Zimbra Collaboration Suite (ZCS) (CVE-2024-27443)
Cross-site scripting in Synacor Zimbra Collaboration Suite (ZCS) (CVE-2024-27443). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2023-38950 KEV |
[KEV] Path Traversal in ZKTeco BioTime (CVE-2023-38950)
Path traversal in ZKTeco BioTime (CVE-2023-38950). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-12987 KEV |
[KEV] OS Command Injection in DrayTek Vigor Routers (CVE-2024-12987)
OS command injection in DrayTek Vigor Routers (CVE-2024-12987). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-42999 KEV |
[KEV] Unsafe Deserialization in SAP NetWeaver (CVE-2025-42999)
Vulnerability in SAP NetWeaver (CVE-2025-42999). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-32756 KEV |
[KEV] Vulnerability in Fortinet Multiple Products (CVE-2025-32756)
Vulnerability in Fortinet Multiple Products (CVE-2025-32756). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-30400 KEV |
[KEV] Use-After-Free in Microsoft Windows (CVE-2025-30400)
Vulnerability in Microsoft Windows (CVE-2025-30400). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-32701 KEV |
[KEV] Use-After-Free in Microsoft Windows (CVE-2025-32701)
Vulnerability in Microsoft Windows (CVE-2025-32701). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-32706 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2025-32706)
Vulnerability in Microsoft Windows (CVE-2025-32706). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-30397 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2025-30397)
Vulnerability in Microsoft Windows (CVE-2025-30397). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-32709 KEV |
[KEV] Use-After-Free in Microsoft Windows (CVE-2025-32709)
Vulnerability in Microsoft Windows (CVE-2025-32709). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-47729 KEV |
[KEV] Vulnerability in TeleMessage TM SGNL (CVE-2025-47729)
Vulnerability in TeleMessage TM SGNL (CVE-2025-47729). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-6047 KEV |
[KEV] OS Command Injection in GeoVision Multiple Devices (CVE-2024-6047)
OS command injection in GeoVision Multiple Devices (CVE-2024-6047). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-11120 KEV |
[KEV] OS Command Injection in GeoVision Multiple Devices (CVE-2024-11120)
OS command injection in GeoVision Multiple Devices (CVE-2024-11120). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-27363 KEV |
[KEV] Out-of-Bounds Write in FreeType (CVE-2025-27363)
Out-of-bounds write in FreeType (CVE-2025-27363). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-3248 KEV |
[KEV] Vulnerability in Langflow (CVE-2025-3248)
Vulnerability in Langflow (CVE-2025-3248). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited. Mitigation: upgrade to 1.3.0 or later.
|
|
| CVE-2024-58136 KEV |
[KEV] Vulnerability in Yiiframework Yii (CVE-2024-58136)
Vulnerability in Yiiframework Yii (CVE-2024-58136). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-34028 KEV |
[KEV] Path Traversal in Commvault Command Center (CVE-2025-34028)
Path traversal in Commvault Command Center (CVE-2025-34028). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2023-44221 KEV |
[KEV] OS Command Injection in SonicWall SMA100 Appliances (CVE-2023-44221)
OS command injection in SonicWall SMA100 Appliances (CVE-2023-44221). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-38475 KEV |
[KEV] Vulnerability in Apache HTTP Server (CVE-2024-38475)
Vulnerability in Apache HTTP Server (CVE-2024-38475). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-31324 KEV |
[KEV] Unrestricted File Upload in SAP NetWeaver (CVE-2025-31324)
Vulnerability in SAP NetWeaver (CVE-2025-31324). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-3928 KEV |
[KEV] Code Injection in Commvault Web Server (CVE-2025-3928)
Code injection in Commvault Web Server (CVE-2025-3928). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-42599 KEV |
[KEV] Vulnerability in Qualitia Active! Mail (CVE-2025-42599)
Vulnerability in Qualitia Active! Mail (CVE-2025-42599). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-1976 KEV |
[KEV] Code Injection in Broadcom Brocade Fabric OS (CVE-2025-1976)
Code injection in Broadcom Brocade Fabric OS (CVE-2025-1976). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-31200 KEV |
[KEV] Vulnerability in Apple Multiple Products (CVE-2025-31200)
Vulnerability in Apple Multiple Products (CVE-2025-31200). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-31201 KEV |
[KEV] Vulnerability in Apple Multiple Products (CVE-2025-31201)
Vulnerability in Apple Multiple Products (CVE-2025-31201). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-24054 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2025-24054)
Vulnerability in Microsoft Windows (CVE-2025-24054). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-20035 KEV |
[KEV] OS Command Injection in SonicWall SMA100 Appliances (CVE-2021-20035)
OS command injection in SonicWall SMA100 Appliances (CVE-2021-20035). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-53197 KEV |
[KEV] Out-of-Bounds Write in Linux Kernel (CVE-2024-53197)
Out-of-bounds write in Linux Kernel (CVE-2024-53197). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-53150 KEV |
[KEV] Out-of-Bounds Read in Linux Kernel (CVE-2024-53150)
Vulnerability in Linux Kernel (CVE-2024-53150). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-30406 KEV |
[KEV] Vulnerability in Gladinet CentreStack (CVE-2025-30406)
Vulnerability in Gladinet CentreStack (CVE-2025-30406). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-29824 KEV |
[KEV] Use-After-Free in Microsoft Windows (CVE-2025-29824)
Vulnerability in Microsoft Windows (CVE-2025-29824). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-31161 KEV |
[KEV] Vulnerability in CrushFTP (CVE-2025-31161)
Vulnerability in CrushFTP (CVE-2025-31161). Risk of unauthorized operations or information disclosure. Exploitable via Authorization header. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-22457 KEV |
[KEV] Vulnerability in Ivanti Connect Secure, Policy Secure, and ZTA Gateways (CVE-2025-22457)
Vulnerability in Ivanti Connect Secure, Policy Secure, and ZTA Gateways (CVE-2025-22457). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-24813 KEV |
[KEV] Vulnerability in Apache Tomcat (CVE-2025-24813)
Vulnerability in Apache Tomcat (CVE-2025-24813). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-20439 KEV |
[KEV] Vulnerability in Cisco Smart Licensing Utility (CVE-2024-20439)
Vulnerability in Cisco Smart Licensing Utility (CVE-2024-20439). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-2783 KEV |
[KEV] Vulnerability in Google Chromium Mojo (CVE-2025-2783)
Vulnerability in Google Chromium Mojo (CVE-2025-2783). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-9874 KEV |
[KEV] Unsafe Deserialization in Sitecore CMS and Experience Platform (XP) (CVE-2019-9874)
Vulnerability in Sitecore CMS and Experience Platform (XP) (CVE-2019-9874). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-9875 KEV |
[KEV] Unsafe Deserialization in Sitecore CMS and Experience Platform (XP) (CVE-2019-9875)
Vulnerability in Sitecore CMS and Experience Platform (XP) (CVE-2019-9875). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-30154 KEV |
[KEV] Vulnerability in Reviewdog action-setup GitHub Action (CVE-2025-30154)
Vulnerability in Reviewdog action-setup GitHub Action (CVE-2025-30154). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-1316 KEV |
[KEV] OS Command Injection in Edimax IC-7100 IP Camera (CVE-2025-1316)
OS command injection in Edimax IC-7100 IP Camera (CVE-2025-1316). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-48248 KEV |
[KEV] Vulnerability in NAKIVO Backup and Replication (CVE-2024-48248)
Vulnerability in NAKIVO Backup and Replication (CVE-2024-48248). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-12637 KEV |
[KEV] Path Traversal in SAP NetWeaver (CVE-2017-12637)
Path traversal in SAP NetWeaver (CVE-2017-12637). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-24472 KEV |
[KEV] Vulnerability in Fortinet FortiOS and FortiProxy (CVE-2025-24472)
Vulnerability in Fortinet FortiOS and FortiProxy (CVE-2025-24472). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-30066 KEV |
[KEV] Vulnerability in Tj-actions changed-files GitHub Action (CVE-2025-30066)
Vulnerability in Tj-actions changed-files GitHub Action (CVE-2025-30066). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-24201 KEV |
[KEV] Out-of-Bounds Write in Apple Multiple Products (CVE-2025-24201)
Out-of-bounds write in Apple Multiple Products (CVE-2025-24201). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-21590 KEV |
[KEV] Vulnerability in Juniper Junos OS (CVE-2025-21590)
Vulnerability in Juniper Junos OS (CVE-2025-21590). Data can be tampered with by attackers. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-26633 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2025-26633)
Vulnerability in Microsoft Windows (CVE-2025-26633). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
