CISA Known Exploited Vulnerabilities
KEV additions — July 2025
18 CVEs entered the KEV catalog in July 2025.
Added July 28, 20253
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-2533 | PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability | 8.8 | 36.3 % | August 18, 2025 |
| CVE-2025-20281 | Cisco Identity Services Engine Injection Vulnerability | 10 | 36.0 % | August 18, 2025 |
| CVE-2025-20337 | Cisco ISE API Unauthenticated Remote Code Execution Vulnerability | 10 | 1.0 % | August 18, 2025 |
Added July 22, 20256
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-2775 | SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability | 7.5 | 65.2 % | August 12, 2025 |
| CVE-2025-2776 | SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability | 9.8 | 57.2 % | August 12, 2025 |
| CVE-2025-49704ransomware | Microsoft SharePoint Remote Code Execution Vulnerability | 8.8 | 59.6 % | July 23, 2025 |
| CVE-2025-49706ransomware | Microsoft SharePoint Server Spoofing Vulnerability | 6.5 | 75.0 % | July 23, 2025 |
| CVE-2025-54309 | CrushFTP Unprotected Alternate Channel Vulnerability | 9 | 77.8 % | August 12, 2025 |
| CVE-2025-6558 | chromium-browser: Chromium insufficient validation | 8.8 | 0.2 % | August 12, 2025 |
Added July 20, 20251
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-53770ransomware | Microsoft SharePoint Server Remote Code Execution Vulnerability | 9.8 | 88.5 % | July 21, 2025 |
Added July 18, 20251
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-25257 | Fortinet FortiWeb SQL Injection Vulnerability | 9.8 | 22.1 % | August 8, 2025 |
Added July 14, 20251
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-47812 | Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability | 10 | 92.8 % | August 4, 2025 |
Added July 10, 20251
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-5777ransomware | NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread | 7.5 | 66.7 % | July 11, 2025 |
Added July 7, 20252
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2019-5418 | Rails Ruby on Rails Path Traversal Vulnerability | 7.5 | 94.3 % | July 28, 2025 |
| CVE-2019-9621 | Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability | 7.5 | 94.1 % | July 28, 2025 |
Added July 2, 20251
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-6554 | Google Chromium V8 Type Confusion Vulnerability | 8.1 | 1.6 % | July 23, 2025 |
Added July 1, 20252
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-48927 | TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability | 5.3 | 9.5 % | July 22, 2025 |
| CVE-2025-48928 | TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability | 4 | 8.3 % | July 22, 2025 |