CISA – Known Exploited Vulnerabilities (KEV)

Uebersicht

Letzter Fetch Letzter Erfolg Aufeinanderfolgende Fehler Letzte Fehlermeldung ETag Last-Modified
2026-10-21 10:17 UTC 2026-10-21 10:17 UTC 0 - W/"ea28426db6e3daf822f8973000a8a7e18220e986453336acb8f1520560aa59aa" -

Letzte Eintraege

1755 Eintraege · 50 pro Seite · Seite 8 von 36

Veroeffentlicht Titel CVEs EPSS-Pctl Severity
2025-08-26 00:00

CVE-2025-7775 — Citrix NetScaler Memory Overflow Vulnerability

CVE-2025-7775

0.97455 CRITICAL
2025-08-25 00:00

CVE-2025-48384 — Git Link Following Vulnerability

CVE-2025-48384

HIGH
2025-08-25 00:00

CVE-2024-8069 — Citrix Session Recording Deserialization of Untrusted Data Vulnerability

CVE-2024-8069

MEDIUM
2025-08-25 00:00

CVE-2024-8068 — Citrix Session Recording Improper Privilege Management Vulnerability

CVE-2024-8068

MEDIUM
2025-08-21 00:00

CVE-2025-43300 — Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

CVE-2025-43300

CRITICAL
2025-08-18 00:00

CVE-2025-54948 — Trend Micro Apex One OS Command Injection Vulnerability

CVE-2025-54948

CRITICAL
2025-08-13 00:00

CVE-2025-8876 — N-able N-Central Command Injection Vulnerability

CVE-2025-8876

CRITICAL
2025-08-13 00:00

CVE-2025-8875 — N-able N-Central Insecure Deserialization Vulnerability

CVE-2025-8875

CRITICAL
2025-08-12 00:00

CVE-2025-8088 — RARLAB WinRAR Path Traversal Vulnerability

CVE-2025-8088

HIGH
2025-08-12 00:00

CVE-2013-3893 — Microsoft Internet Explorer Resource Management Errors Vulnerability

CVE-2013-3893

HIGH
2025-08-12 00:00

CVE-2007-0671 — Microsoft Office Excel Remote Code Execution Vulnerability

CVE-2007-0671

HIGH
2025-08-05 00:00

CVE-2020-25078 — D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability

CVE-2020-25078

HIGH
2025-08-05 00:00

CVE-2022-40799 — D-Link DNR-322L Download of Code Without Integrity Check Vulnerability

CVE-2022-40799

HIGH
2025-08-05 00:00

CVE-2020-25079 — D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability

CVE-2020-25079

HIGH
2025-07-28 00:00

CVE-2025-20337 — Cisco Identity Services Engine Injection Vulnerability

CVE-2025-20337

CRITICAL
2025-07-28 00:00

CVE-2023-2533 — PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability

CVE-2023-2533

HIGH
2025-07-28 00:00

CVE-2025-20281 — Cisco Identity Services Engine Injection Vulnerability

CVE-2025-20281

CRITICAL
2025-07-22 00:00

CVE-2025-2775 — SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability

CVE-2025-2775

CRITICAL
2025-07-22 00:00

CVE-2025-6558 — Google Chromium ANGLE and GPU Improper Input Validation Vulnerability

CVE-2025-6558

HIGH
2025-07-22 00:00

CVE-2025-54309 — CrushFTP Unprotected Alternate Channel Vulnerability

CVE-2025-54309

CRITICAL
2025-07-22 00:00

CVE-2025-49706 — Microsoft SharePoint Improper Authentication Vulnerability

CVE-2025-49704
CVE-2025-49706
CVE-2025-53770 +1

0.99991 CRITICAL
2025-07-22 00:00

CVE-2025-49704 — Microsoft SharePoint Code Injection Vulnerability

CVE-2025-49704
CVE-2025-49706
CVE-2025-53770

0.99991 CRITICAL
2025-07-22 00:00

CVE-2025-2776 — SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability

CVE-2025-2776

CRITICAL
2025-07-20 00:00

CVE-2025-53770 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

CVE-2025-49704
CVE-2025-53770
CVE-2025-53771

0.99991 CRITICAL
2025-07-18 00:00

CVE-2025-25257 — Fortinet FortiWeb SQL Injection Vulnerability

CVE-2025-25257

CRITICAL
2025-07-14 00:00

CVE-2025-47812 — Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability

CVE-2025-47812

CRITICAL
2025-07-10 00:00

CVE-2025-5777 — Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability

CVE-2025-5777

0.99979 CRITICAL
2025-07-07 00:00

CVE-2014-3931 — Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability

CVE-2014-3931

CRITICAL
2025-07-07 00:00

CVE-2019-9621 — Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability

CVE-2019-9621

HIGH
2025-07-07 00:00

CVE-2016-10033 — PHPMailer Command Injection Vulnerability

CVE-2016-10033

CRITICAL
2025-07-07 00:00

CVE-2019-5418 — Rails Ruby on Rails Path Traversal Vulnerability

CVE-2019-5418

HIGH
2025-07-02 00:00

CVE-2025-6554 — Google Chromium V8 Type Confusion Vulnerability

CVE-2025-6554

HIGH
2025-07-01 00:00

CVE-2025-48927 — TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability

CVE-2025-48927

MEDIUM
2025-07-01 00:00

CVE-2025-48928 — TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability

CVE-2025-48928

MEDIUM
2025-06-30 00:00

CVE-2025-6543 — Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability

CVE-2025-5777
CVE-2025-6543

0.99979 CRITICAL
2025-06-25 00:00

CVE-2024-54085 — AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability

CVE-2024-54085

CRITICAL
2025-06-25 00:00

CVE-2019-6693 — Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability

CVE-2019-6693

MEDIUM
2025-06-25 00:00

CVE-2024-0769 — D-Link DIR-859 Router Path Traversal Vulnerability

CVE-2024-0769

MEDIUM
2025-06-17 00:00

CVE-2023-0386 — Linux Kernel Improper Ownership Management Vulnerability

CVE-2023-0386

HIGH
2025-06-16 00:00

CVE-2023-33538 — TP-Link Multiple Routers Command Injection Vulnerability

CVE-2023-33538

HIGH
2025-06-16 00:00

CVE-2025-43200 — Apple Multiple Products Unspecified Vulnerability

CVE-2025-43200

MEDIUM
2025-06-10 00:00

CVE-2025-24016 — Wazuh Server Deserialization of Untrusted Data Vulnerability

CVE-2025-24016

CRITICAL
2025-06-10 00:00

CVE-2025-33053 — Microsoft Windows External Control of File Name or Path Vulnerability

CVE-2025-33053

HIGH
2025-06-09 00:00

CVE-2024-42009 — RoundCube Webmail Cross-Site Scripting Vulnerability

CVE-2024-42009

CRITICAL
2025-06-09 00:00

CVE-2025-32433 — Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability

CVE-2025-32433

CRITICAL
2025-06-05 00:00

CVE-2025-5419 — Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

CVE-2025-5419

HIGH
2025-06-03 00:00

CVE-2025-27038 — Qualcomm Multiple Chipsets Use-After-Free Vulnerability

CVE-2025-27038

HIGH
2025-06-03 00:00

CVE-2025-21479 — Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

CVE-2025-21479

HIGH
2025-06-03 00:00

CVE-2025-21480 — Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

CVE-2025-21480

HIGH
2025-06-02 00:00

CVE-2025-3935 — ConnectWise ScreenConnect Improper Authentication Vulnerability

CVE-2025-3935

HIGH