Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2025-57819 Sangoma FreePBX Authentication Bypass Vulnerability CRITICAL 10.0 N/A cvelistv5 2025-08-29
cve-2025-7775 Citrix NetScaler Memory Overflow Vulnerability CRITICAL 9.2 N/A cvelistv5 2025-08-26
cve-2025-48384 Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both hi... HIGH 8.0 N/A cvelistv5 2026-09-24
cve-2024-8069 Citrix Session Recording Deserialization of Untrusted Data Vulnerability MEDIUM 5.1 N/A cvelistv5 2025-08-25
cve-2024-8068 Citrix Session Recording Improper Privilege Management Vulnerability HIGH N/A N/A cvelistv5 2025-08-25
cve-2025-43300 Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability CRITICAL 10.0 N/A cvelistv5 2025-08-21
cve-2025-54948 Trend Micro Apex One OS Command Injection Vulnerability HIGH N/A N/A cvelistv5 2025-08-18
cve-2025-8876 N-able N-Central Command Injection Vulnerability HIGH N/A N/A cvelistv5 2025-08-13
cve-2025-8875 Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects... CRITICAL 9.4 N/A cvelistv5 2026-09-24
cve-2025-8088 RARLAB WinRAR Path Traversal Vulnerability CRITICAL N/A N/A cvelistv5 2025-08-12
cve-2013-3893 Microsoft Internet Explorer Resource Management Errors Vulnerability HIGH N/A N/A cvelistv5 2025-08-12
cve-2007-0671 Microsoft Office Excel Remote Code Execution Vulnerability HIGH N/A N/A cvelistv5 2025-08-12
cve-2022-40799 D-Link DNR-322L Download of Code Without Integrity Check Vulnerability HIGH N/A N/A cvelistv5 2025-08-05
cve-2020-25079 D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability HIGH N/A N/A cvelistv5 2025-08-05
cve-2020-25078 D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability HIGH N/A N/A cvelistv5 2025-08-05
cve-2025-20337 Cisco Identity Services Engine Injection Vulnerability HIGH N/A N/A cvelistv5 2025-07-28
cve-2025-20281 Cisco Identity Services Engine Injection Vulnerability HIGH N/A N/A cvelistv5 2025-07-28
cve-2023-2533 PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability HIGH 8.4 N/A cvelistv5 2025-07-28
cve-2025-6558 Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote... HIGH 8.8 N/A cvelistv5 2026-09-24
cve-2025-54309 CrushFTP Unprotected Alternate Channel Vulnerability HIGH N/A N/A cvelistv5 2025-07-22
cve-2025-49706 Microsoft SharePoint Improper Authentication Vulnerability CRITICAL N/A N/A cvelistv5 2025-07-22
cve-2025-49704 Microsoft SharePoint Code Injection Vulnerability HIGH 8.8 N/A cvelistv5 2025-07-22
cve-2025-2776 SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability CRITICAL 9.3 N/A cvelistv5 2025-07-22
cve-2025-2775 SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability CRITICAL 9.3 N/A cvelistv5 2025-07-22
cve-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 N/A cvelistv5 2025-07-20
cve-2025-25257 Fortinet FortiWeb SQL Injection Vulnerability HIGH N/A N/A cvelistv5 2025-07-18
cve-2025-47812 Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability HIGH N/A N/A cvelistv5 2025-07-14
cve-2025-5777 Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability CRITICAL N/A N/A cvelistv5 2025-07-10
cve-2019-9621 Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability HIGH 7.5 N/A cvelistv5 2025-07-07
cve-2019-5418 Rails Ruby on Rails Path Traversal Vulnerability HIGH N/A N/A cvelistv5 2025-07-07