Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2025-56005 | Dabeaz Ply | 9.8critical | — | — | |
| CVE-2025-55177 | Meta Platforms WhatsApp | 2025-09-02 | 2025-09-23 | ||
| CVE-2025-54948 | Trend Micro Apex One | 2025-08-18 | 2025-09-08 | ||
| CVE-2025-54313 | Prettier eslint-config-prettier | 2026-01-22 | 2026-02-12 | ||
| CVE-2025-54309 | CrushFTP CrushFTP | 2025-07-22 | 2025-08-12 | ||
| CVE-2025-54253 | Adobe Experience Manager (AEM) Forms | 2025-10-15 | 2025-11-05 | ||
| CVE-2025-54236 | Adobe Commerce and Magento | 2025-10-24 | 2025-11-14 | ||
| CVE-2025-5419 | Google Chromium V8 | 2025-06-05 | 2025-06-26 | ||
| CVE-2025-54068 | Laravel Livewire | 2026-03-20 | 2026-04-03 | ||
| CVE-2025-53690 | Sitecore Multiple Products | 2025-09-04 | 2025-09-25 | ||
| CVE-2025-53521 | F5 BIG-IP | 2026-03-27 | 2026-03-30 | ||
| CVE-2025-5086 | Dassault Systèmes DELMIA Apriso | 2025-09-11 | 2025-10-02 | ||
| CVE-2025-49113 | Roundcube Webmail | 2026-02-20 | 2026-03-13 | ||
| CVE-2025-48928 | TeleMessage TM SGNL | 2025-07-01 | 2025-07-22 | ||
| CVE-2025-48927 | TeleMessage TM SGNL | 2025-07-01 | 2025-07-22 | ||
| CVE-2025-48703 | CWP Control Web Panel | 2025-11-04 | 2025-11-25 | ||
| CVE-2025-48700 | Synacor Zimbra Collaboration Suite (ZCS) | 2026-04-20 | 2026-04-23 | ||
| CVE-2025-48633 | Android Framework | 2025-12-02 | 2025-12-23 | ||
| CVE-2025-48595 | Android Framework | 2026-06-02 | 2026-06-05 | ||
| CVE-2025-48572 | Android Framework | 2025-12-02 | 2025-12-23 | ||
| CVE-2025-48543 | Android Runtime | 2025-09-04 | 2025-09-25 | ||
| CVE-2025-48384 | Git Git | 2025-08-25 | 2025-09-15 | ||
| CVE-2025-47827 | IGEL IGEL OS | 2025-10-14 | 2025-11-04 | ||
| CVE-2025-47813 | Wing FTP Server Wing FTP Server | 2026-03-16 | 2026-03-30 | ||
| CVE-2025-47812 | Wing FTP Server Wing FTP Server | 2025-07-14 | 2025-08-04 |