Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2025-57819 | Sangoma FreePBX contains an authentication bypass vulnerability due to insufficiently sanitized user-supplied data allows unauthenticated… | Sangoma / FreePBX | Aug 29, 2025 | — | View → |
| CVE-2025-7775 | Citrix NetScaler ADC and NetScaler Gateway contain a memory overflow vulnerability that could allow for remote code execution and/or… | Citrix / NetScaler | Aug 26, 2025 | — | View → |
| CVE-2024-8068 | Citrix Session Recording contains an improper privilege management vulnerability that could allow for privilege escalation to… | Citrix / Session Recording | Aug 25, 2025 | — | View → |
| CVE-2024-8069 | Citrix Session Recording contains a deserialization of untrusted data vulnerability that allows limited remote code execution with… | Citrix / Session Recording | Aug 25, 2025 | — | View → |
| CVE-2025-48384 | Git contains a link following vulnerability that stems from Git’s inconsistent handling of carriage return characters in configuration… | Git / Git | Aug 25, 2025 | — | View → |
| CVE-2025-43300 | Apple iOS, iPadOS, and macOS contain an out-of-bounds write vulnerability in the Image I/O framework. | Apple / iOS, iPadOS, and macOS | Aug 21, 2025 | — | View → |
| CVE-2025-54948 | Trend Micro Apex One Management Console (on-premise) contains an OS command injection vulnerability that could allow a pre-authenticated… | Trend Micro / Apex One | Aug 18, 2025 | — | View → |
| CVE-2025-8875 | N-able N-Central contains an insecure deserialization vulnerability that could lead to command execution. | N-able / N-Central | Aug 13, 2025 | — | View → |
| CVE-2025-8876 | N-able N-Central contains a command injection vulnerability via improper sanitization of user input. | N-able / N-Central | Aug 13, 2025 | — | View → |
| CVE-2007-0671 | Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened.… | Microsoft / Office | Aug 12, 2025 | — | View → |
| CVE-2013-3893 | Microsoft Internet Explorer contains a memory corruption vulnerability that allows for remote code execution. The impacted products could… | Microsoft / Internet Explorer | Aug 12, 2025 | — | View → |
| CVE-2025-8088 | RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This vulnerability could allow an attacker… | RARLAB / WinRAR | Aug 12, 2025 | Ransomware | View → |
| CVE-2020-25078 | D-Link DCS-2530L and DCS-2670L devices contains an unspecified vulnerability that could allow for remote administrator password… | D-Link / DCS-2530L and DCS-2670L Devices | Aug 5, 2025 | — | View → |
| CVE-2020-25079 | D-Link DCS-2530L and DCS-2670L devices contains a command injection vulnerability in the cgi-bin/ddns_enc.cgi. The impacted products could… | D-Link / DCS-2530L and DCS-2670L Devices | Aug 5, 2025 | — | View → |
| CVE-2022-40799 | D-Link DNR-322L contains a download of code without integrity check vulnerability that could allow an authenticated attacker to execute OS… | D-Link / DNR-322L | Aug 5, 2025 | — | View → |
| CVE-2023-2533 | PaperCut NG/MF contains a cross-site request forgery (CSRF) vulnerability, which, under specific conditions, could potentially enable an… | PaperCut / NG/MF | Jul 28, 2025 | — | View → |
| CVE-2025-20281 | Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient… | Cisco / Identity Services Engine | Jul 28, 2025 | — | View → |
| CVE-2025-20337 | Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient… | Cisco / Identity Services Engine | Jul 28, 2025 | — | View → |
| CVE-2025-2775 | SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Checkin processing functionality,… | SysAid / SysAid On-Prem | Jul 22, 2025 | — | View → |
| CVE-2025-2776 | SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Server URL processing functionality,… | SysAid / SysAid On-Prem | Jul 22, 2025 | — | View → |