CISA Known Exploited Vulnerabilities
KEV additions — July 2025
18 CVEs entered the KEV catalog in July 2025.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added July 28, 20253
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-2533 | PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability | 8.8 | 28.6 % | Aug 18, 2025 |
| CVE-2025-20281 | Cisco Identity Services Engine Injection Vulnerability | 10 | 97.6 % | Aug 18, 2025 |
| CVE-2025-20337 | Cisco ISE API Unauthenticated Remote Code Execution Vulnerability | 10 | 74.5 % | Aug 18, 2025 |
Added July 22, 20256
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-2775 | SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability | 7.5 | 42.6 % | Aug 12, 2025 |
| CVE-2025-2776 | SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability | 9.8 | 64.7 % | Aug 12, 2025 |
| CVE-2025-49704ransomware | Microsoft SharePoint Remote Code Execution Vulnerability | 8.8 | 100.0 % | Jul 23, 2025 |
| CVE-2025-49706ransomware | Microsoft SharePoint Server Spoofing Vulnerability | 6.5 | 99.1 % | Jul 23, 2025 |
| CVE-2025-54309 | CrushFTP Unprotected Alternate Channel Vulnerability | 9 | 93.5 % | Aug 12, 2025 |
| CVE-2025-6558 | chromium-browser: Chromium insufficient validation | 8.8 | 10.9 % | Aug 12, 2025 |
Added July 20, 20251
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-53770ransomware | Microsoft SharePoint Server Remote Code Execution Vulnerability | 9.8 | 100.0 % | Jul 21, 2025 |
Added July 18, 20251
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-25257 | Fortinet FortiWeb SQL Injection Vulnerability | 9.8 | 99.9 % | Aug 8, 2025 |
Added July 14, 20251
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-47812 | Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability | 10 | 93.9 % | Aug 4, 2025 |
Added July 10, 20251
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-5777ransomware | NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread | 7.5 | 100.0 % | Jul 11, 2025 |
Added July 7, 20252
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2019-5418 | Rails Ruby on Rails Path Traversal Vulnerability | 7.5 | 98.5 % | Jul 28, 2025 |
| CVE-2019-9621 | Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability | 7.5 | 81.0 % | Jul 28, 2025 |
Added July 2, 20251
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-6554 | Google Chromium V8 Type Confusion Vulnerability | 8.1 | 14.1 % | Jul 23, 2025 |
Added July 1, 20252
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-48927 | TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability | 5.3 | 11.1 % | Jul 22, 2025 |
| CVE-2025-48928 | TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability | 4 | 0.6 % | Jul 22, 2025 |