Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2025-7081 CVE-2025-7081 MEDIUM 6.5 N/A cvelistv5
cve-2025-69200 phpMyFAQ has unauthenticated config backup download via /api/setup/backup HIGH 7.5 N/A cvelistv5 2026-06-17
cve-2025-68645 Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability HIGH N/A N/A cvelistv5 2026-01-22
cve-2025-68613 n8n Improper Control of Dynamically-Managed Code Resources Vulnerability HIGH N/A N/A cvelistv5 2026-03-11
cve-2025-68461 RoundCube Webmail Cross-site Scripting Vulnerability HIGH N/A N/A cvelistv5 2026-02-20
cve-2025-67303 CVE-2025-67303 HIGH 7.5 N/A cvelistv5
cve-2025-66644 Array Networks ArrayOS AG OS Command Injection Vulnerability HIGH 7.2 N/A cvelistv5 2025-12-08
cve-2025-66376 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability HIGH 7.2 N/A cvelistv5 2026-03-18
cve-2025-6558 Google Chromium ANGLE and GPU Improper Input Validation Vulnerability HIGH N/A N/A cvelistv5 2025-07-22
cve-2025-6554 Google Chromium V8 Type Confusion Vulnerability HIGH N/A N/A cvelistv5 2025-07-02
cve-2025-6543 Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability HIGH N/A N/A cvelistv5 2025-06-30
cve-2025-6485 TOTOLINK A3002R formWlSiteSurvey os command injection MEDIUM 6.3 N/A cvelistv5 2026-06-17
cve-2025-64446 Fortinet FortiWeb Path Traversal Vulnerability CRITICAL 9.4 N/A cvelistv5 2025-11-14
cve-2025-64328 Sangoma FreePBX OS Command Injection Vulnerability HIGH 8.6 N/A cvelistv5 2026-02-03
cve-2025-64095 CVE-2025-64095 CRITICAL 10.0 N/A cvelistv5
cve-2025-62221 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability HIGH 7.8 N/A cvelistv5 2026-09-25
cve-2025-62215 Microsoft Windows Race Condition Vulnerability HIGH 7.0 N/A cvelistv5 2025-11-12
cve-2025-6218 RARLAB WinRAR Path Traversal Vulnerability HIGH N/A N/A cvelistv5 2025-12-09
cve-2025-6205 Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability HIGH N/A N/A cvelistv5 2025-10-28
cve-2025-6204 Dassault Systèmes DELMIA Apriso Code Injection Vulnerability HIGH N/A N/A cvelistv5 2025-10-28
cve-2025-61932 Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability HIGH N/A N/A cvelistv5 2025-10-22
cve-2025-61884 Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability CRITICAL N/A N/A cvelistv5 2025-10-20
cve-2025-61882 Oracle E-Business Suite Unspecified Vulnerability CRITICAL 9.8 N/A cvelistv5 2025-10-06
cve-2025-61757 Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability HIGH N/A N/A cvelistv5 2025-11-21
cve-2025-61666 CVE-2025-61666 HIGH 8.7 N/A cvelistv5
cve-2025-60710 Microsoft Windows Link Following Vulnerability HIGH 7.8 N/A cvelistv5 2026-04-13
cve-2025-59718 Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability CRITICAL 9.1 N/A cvelistv5 2025-12-16
cve-2025-59689 Libraesva Email Security Gateway Command Injection Vulnerability MEDIUM 6.1 N/A cvelistv5 2025-09-29
cve-2025-59474 jenkins: Missing permission check allows obtaining agent names MEDIUM 5.3 N/A cvelistv5 2026-06-28
cve-2025-59374 "UNSUPPORTED WHEN ASSIGNED" Certain versions of the ASUS Live Update client were distributed with unauthorized modifications introduced through a supply chain compromise. The modified builds could cause devices meeting specific targeting conditions to perform unintended actions. Only devices that met these conditions and installed the compromised versions were affected. The Live Update client has already reached End-of-Support (EOS) in October 2021, and no currently supported devices or products are affected by this issue. CRITICAL 9.8 N/A cvelistv5 2026-09-25