Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2025-59230 | Microsoft Windows | 2025-10-14 | 2025-11-04 | ||
| CVE-2025-58360 | OSGeo GeoServer | 2025-12-11 | 2026-01-01 | ||
| CVE-2025-58034 | Fortinet FortiWeb | 2025-11-18 | 2025-11-25 | ||
| CVE-2025-57819 | Sangoma FreePBX | 2025-08-29 | 2025-09-19 | ||
| CVE-2025-55177 | Meta Platforms WhatsApp | 2025-09-02 | 2025-09-23 | ||
| CVE-2025-54948 | Trend Micro Apex One | 2025-08-18 | 2025-09-08 | ||
| CVE-2025-54313 | Prettier eslint-config-prettier | 2026-01-22 | 2026-02-12 | ||
| CVE-2025-54309 | CrushFTP CrushFTP | 2025-07-22 | 2025-08-12 | ||
| CVE-2025-54253 | Adobe Experience Manager (AEM) Forms | 2025-10-15 | 2025-11-05 | ||
| CVE-2025-54236 | Adobe Commerce and Magento | 2025-10-24 | 2025-11-14 | ||
| CVE-2025-5419 | Google Chromium V8 | 2025-06-05 | 2025-06-26 | ||
| CVE-2025-54068 | Laravel Livewire | 2026-03-20 | 2026-04-03 | ||
| CVE-2025-53690 | Sitecore Multiple Products | 2025-09-04 | 2025-09-25 | ||
| CVE-2025-53521 | F5 BIG-IP | 2026-03-27 | 2026-03-30 | ||
| CVE-2025-5086 | Dassault Systèmes DELMIA Apriso | 2025-09-11 | 2025-10-02 | ||
| CVE-2025-49113 | Roundcube Webmail | 2026-02-20 | 2026-03-13 | ||
| CVE-2025-48928 | TeleMessage TM SGNL | 2025-07-01 | 2025-07-22 | ||
| CVE-2025-48927 | TeleMessage TM SGNL | 2025-07-01 | 2025-07-22 | ||
| CVE-2025-48703 | CWP Control Web Panel | 2025-11-04 | 2025-11-25 | ||
| CVE-2025-48700 | Synacor Zimbra Collaboration Suite (ZCS) | 2026-04-20 | 2026-04-23 | ||
| CVE-2025-48633 | Android Framework | 2025-12-02 | 2025-12-23 | ||
| CVE-2025-48595 | Android Framework | 2026-06-02 | 2026-06-05 | ||
| CVE-2025-48572 | Android Framework | 2025-12-02 | 2025-12-23 | ||
| CVE-2025-48543 | Android Runtime | 2025-09-04 | 2025-09-25 | ||
| CVE-2025-48384 | Git Git | 2025-08-25 | 2025-09-15 |