CISA Known Exploited Vulnerabilities
KEV additions — November 2025
11 CVEs entered the KEV catalog in November 2025.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added November 28, 20251
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2021-26829 | OpenPLC ScadaBR Cross-site Scripting Vulnerability | 5.4 | 48.0 % | Dec 19, 2025 |
Added November 21, 20251
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-61757 | Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability | 9.8 | 88.6 % | Dec 12, 2025 |
Added November 19, 20251
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-13223 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 4.9 % | Dec 10, 2025 |
Added November 18, 20251
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-58034 | Fortinet FortiWeb OS Command Injection Vulnerability | 7.2 | 54.7 % | Nov 25, 2025 |
Added November 14, 20251
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-64446 | Fortinet FortiWeb Path Traversal Vulnerability | 9.8 | 92.0 % | Nov 21, 2025 |
Added November 12, 20253
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-12480 | Gladinet Triofox Improper Access Control Vulnerability | 9.1 | 95.7 % | Dec 3, 2025 |
| CVE-2025-62215 | Microsoft Windows Race Condition Vulnerability | 7 | 4.5 % | Dec 3, 2025 |
| CVE-2025-9242 | WatchGuard Firebox Out-of-Bounds Write Vulnerability | 9.8 | 91.8 % | Dec 3, 2025 |
Added November 10, 20251
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-21042 | Samsung Mobile Devices Out-of-Bounds Write Vulnerability | 9.8 | 33.2 % | Dec 1, 2025 |
Added November 4, 20252
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-11371 | Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability | 7.5 | 92.1 % | Nov 25, 2025 |
| CVE-2025-48703 | CWP Control Web Panel OS Command Injection Vulnerability | 9 | 99.7 % | Nov 25, 2025 |