Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2025-55177 Incomplete authorization of linked device synchronization messages in WhatsApp for iOS prior to v2.25.21.73, WhatsApp... MEDIUM 5.4 13.51% cvelistv5 2026-10-18
cve-2020-24363 TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability HIGH N/A 22.19% cvelistv5 2025-09-02
cve-2025-57819 Sangoma FreePBX Authentication Bypass Vulnerability HIGH N/A 95.21% cvelistv5 2025-08-28
cve-2025-7775 Citrix NetScaler Memory Overflow Vulnerability HIGH N/A 20.67% cvelistv5 2025-08-26
cve-2025-48384 Git Link Following Vulnerability HIGH N/A 4.38% cvelistv5 2025-08-25
cve-2024-8069 Citrix Session Recording Deserialization of Untrusted Data Vulnerability HIGH N/A 21.09% cvelistv5 2024-11-12
cve-2024-8068 Citrix Session Recording Improper Privilege Management Vulnerability HIGH N/A 3.48% cvelistv5 2024-11-12
cve-2025-43300 Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability HIGH N/A 65.16% cvelistv5 2025-08-20
cve-2025-54948 Trend Micro Apex One OS Command Injection Vulnerability HIGH N/A 25.40% cvelistv5 2025-08-06
cve-2025-8876 N-able N-Central Command Injection Vulnerability HIGH N/A 4.12% cvelistv5 2025-08-13
cve-2025-8875 N-able N-Central Insecure Deserialization Vulnerability HIGH N/A 2.51% cvelistv5 2025-08-13
cve-2025-8088 RARLAB WinRAR Path Traversal Vulnerability CRITICAL N/A 94.01% cvelistv5 2025-08-08
cve-2013-3893 Microsoft Internet Explorer Resource Management Errors Vulnerability HIGH N/A 87.64% cvelistv5 2013-09-21
cve-2007-0671 Microsoft Office Excel Remote Code Execution Vulnerability HIGH N/A 44.10% cvelistv5 2013-03-21
cve-2022-40799 D-Link DNR-322L Download of Code Without Integrity Check Vulnerability HIGH N/A 33.65% cvelistv5 2025-08-05
cve-2020-25079 D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability HIGH N/A 54.01% cvelistv5 2025-08-05
cve-2020-25078 D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability HIGH N/A 97.51% cvelistv5 2021-06-01
cve-2025-20337 Cisco Identity Services Engine Injection Vulnerability HIGH N/A 74.50% cvelistv5 2025-07-21
cve-2025-20281 Cisco Identity Services Engine Injection Vulnerability HIGH N/A 97.60% cvelistv5 2025-07-28
cve-2023-2533 PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability HIGH N/A 28.83% cvelistv5 2025-07-28
cve-2025-6558 Google Chromium ANGLE and GPU Improper Input Validation Vulnerability HIGH N/A 10.93% cvelistv5 2025-07-22
cve-2025-54309 CrushFTP Unprotected Alternate Channel Vulnerability HIGH N/A 93.47% cvelistv5 2025-07-18
cve-2025-49706 Microsoft SharePoint Improper Authentication Vulnerability CRITICAL N/A 99.06% cvelistv5 2025-07-18
cve-2025-49704 Microsoft SharePoint Code Injection Vulnerability HIGH 8.8 100.00% cvelistv5 2025-07-18
cve-2025-2776 SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability HIGH N/A 64.73% cvelistv5 2025-07-22
cve-2025-2775 SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability HIGH N/A 42.61% cvelistv5 2025-05-19
cve-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CRITICAL N/A 100.00% cvelistv5 2025-07-18
cve-2025-25257 Fortinet FortiWeb SQL Injection Vulnerability HIGH N/A 99.92% cvelistv5 2025-07-11
cve-2025-47812 Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability HIGH N/A 93.88% cvelistv5 2025-07-10
cve-2025-5777 Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability CRITICAL 9.3 99.97% cvelistv5 2025-06-26