Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2025-49704 | Microsoft SharePoint contains a code injection vulnerability that could allow an authorized attacker to execute code over a network. This… | Microsoft / SharePoint | Jul 22, 2025 | Ransomware | View → |
| CVE-2025-49706 | Microsoft SharePoint contains an improper authentication vulnerability that allows an authorized attacker to perform spoofing over a… | Microsoft / SharePoint | Jul 22, 2025 | Ransomware | View → |
| CVE-2025-54309 | CrushFTP contains an unprotected alternate channel vulnerability. When the DMZ proxy feature is not used, mishandles AS2 validation and… | CrushFTP / CrushFTP | Jul 22, 2025 | — | View → |
| CVE-2025-6558 | Google Chromium contains an improper input validation vulnerability in ANGLE and GPU. This vulnerability could allow a remote attacker to… | Google / Chromium | Jul 22, 2025 | — | View → |
| CVE-2025-53770 | Microsoft SharePoint Server on-premises contains a deserialization of untrusted data vulnerability that could allow an unauthorized… | Microsoft / SharePoint | Jul 20, 2025 | Ransomware | View → |
| CVE-2025-25257 | Fortinet FortiWeb contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized SQL code or… | Fortinet / FortiWeb | Jul 18, 2025 | — | View → |
| CVE-2025-47812 | Wing FTP Server contains an improper neutralization of null byte or NUL character vulnerability that can allow injection of arbitrary Lua… | Wing FTP Server / Wing FTP Server | Jul 14, 2025 | — | View → |
| CVE-2025-5777 | Citrix NetScaler ADC and Gateway contain an out-of-bounds read vulnerability due to insufficient input validation. This vulnerability can… | Citrix / NetScaler ADC and Gateway | Jul 10, 2025 | Ransomware | View → |
| CVE-2014-3931 | Multi-Router Looking Glass (MRLG) contains a buffer overflow vulnerability that could allow remote attackers to cause an arbitrary memory… | Looking Glass / Multi-Router Looking Glass (MRLG) | Jul 7, 2025 | — | View → |
| CVE-2016-10033 | PHPMailer contains a command injection vulnerability because it fails to sanitize user-supplied input. Specifically, this issue affects… | PHP / PHPMailer | Jul 7, 2025 | — | View → |
| CVE-2019-5418 | Rails Ruby on Rails contains a path traversal vulnerability in Action View. Specially crafted accept headers in combination with calls to… | Rails / Ruby on Rails | Jul 7, 2025 | — | View → |
| CVE-2019-9621 | Synacor Zimbra Collaboration Suite (ZCS) contains a server-side request forgery (SSRF) vulnerability via the ProxyServlet component. | Synacor / Zimbra Collaboration Suite (ZCS) | Jul 7, 2025 | — | View → |
| CVE-2025-6554 | Google Chromium V8 contains a type confusion vulnerability that could allow a remote attacker to perform arbitrary read/write via a… | Google / Chromium V8 | Jul 2, 2025 | — | View → |
| CVE-2025-48927 | TeleMessage TM SGNL contains an initialization of a resource with an insecure default vulnerability. This vulnerability relies on how the… | TeleMessage / TM SGNL | Jul 1, 2025 | — | View → |
| CVE-2025-48928 | TeleMessage TM SGNL contains an exposure of core dump file to an unauthorized control sphere Vulnerability. This vulnerability is based on… | TeleMessage / TM SGNL | Jul 1, 2025 | — | View → |
| CVE-2025-6543 | Citrix NetScaler ADC and Gateway contain a buffer overflow vulnerability leading to unintended control flow and Denial of Service.… | Citrix / NetScaler ADC and Gateway | Jun 30, 2025 | — | View → |
| CVE-2019-6693 | Fortinet FortiOS contains a use of hard-coded credentials vulnerability that could allow an attacker to cipher sensitive data in FortiOS… | Fortinet / FortiOS | Jun 25, 2025 | Ransomware | View → |
| CVE-2024-0769 | D-Link DIR-859 routers contain a path traversal vulnerability in the file /hedwig.cgi of the component HTTP POST Request Handler.… | D-Link / DIR-859 Router | Jun 25, 2025 | — | View → |
| CVE-2024-54085 | AMI MegaRAC SPx contains an authentication bypass by spoofing vulnerability in the Redfish Host Interface. A successful exploitation of… | AMI / MegaRAC SPx | Jun 25, 2025 | — | View → |
| CVE-2023-0386 | Linux Kernel contains an improper ownership management vulnerability, where unauthorized access to the execution of the setuid file with… | Linux / Kernel | Jun 17, 2025 | — | View → |