HackZoneLabs News
Newsletter

Known exploited vulnerabilities

From CISA’s Known Exploited Vulnerabilities catalogue: flaws that attackers are using now, when each was added, and the date federal agencies were told to fix it by.

Feed of new additions

In the catalogue
1781
Added in the last 7 days
12
Used in ransomware
361

The catalogue, newest first

CVEVendorProductNameAddedFix dueRansomware
CVE-2025-20393CiscoMultiple ProductsCisco Multiple Products Improper Input Validation Vulnerability17 Dec 202524 Dec 2025Unknown
CVE-2025-40602SonicWallSMA1000 applianceSonicWall SMA1000 Missing Authorization Vulnerability17 Dec 202524 Dec 2025Unknown
CVE-2025-59374ASUSLive UpdateASUS Live Update Embedded Malicious Code Vulnerability17 Dec 20257 Jan 2026Unknown
CVE-2025-59718FortinetMultiple ProductsFortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability16 Dec 202523 Dec 2025Unknown
CVE-2025-14611GladinetCentreStack and TriofoxGladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability15 Dec 20255 Jan 2026Unknown
CVE-2025-43529AppleMultiple ProductsApple Multiple Products Use-After-Free WebKit Vulnerability15 Dec 20255 Jan 2026Unknown
CVE-2018-4063Sierra WirelessAirLink ALEOSSierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability12 Dec 20252 Jan 2026Unknown
CVE-2025-14174GoogleChromiumGoogle Chromium Out of Bounds Memory Access Vulnerability12 Dec 20252 Jan 2026Unknown
CVE-2025-58360OSGeoGeoServerOSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability11 Dec 20251 Jan 2026Unknown
CVE-2025-6218RARLABWinRARRARLAB WinRAR Path Traversal Vulnerability9 Dec 202530 Dec 2025Unknown
CVE-2025-62221MicrosoftWindowsMicrosoft Windows Use After Free Vulnerability9 Dec 202530 Dec 2025Unknown
CVE-2022-37055D-LinkRoutersD-Link Routers Buffer Overflow Vulnerability8 Dec 202529 Dec 2025Unknown
CVE-2025-66644Array NetworksArrayOS AGArray Networks ArrayOS AG OS Command Injection Vulnerability8 Dec 202529 Dec 2025Unknown
CVE-2025-55182MetaReact Server ComponentsMeta React Server Components Remote Code Execution Vulnerability5 Dec 202512 Dec 2025Known
CVE-2021-26828OpenPLCScadaBROpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability3 Dec 202524 Dec 2025Unknown
CVE-2025-48572AndroidFrameworkAndroid Framework Privilege Escalation Vulnerability2 Dec 202523 Dec 2025Unknown
CVE-2025-48633AndroidFrameworkAndroid Framework Information Disclosure Vulnerability2 Dec 202523 Dec 2025Unknown
CVE-2021-26829OpenPLCScadaBROpenPLC ScadaBR Cross-site Scripting Vulnerability28 Nov 202519 Dec 2025Unknown
CVE-2025-61757OracleFusion MiddlewareOracle Fusion Middleware Missing Authentication for Critical Function Vulnerability21 Nov 202512 Dec 2025Unknown
CVE-2025-13223GoogleChromium V8Google Chromium V8 Type Confusion Vulnerability19 Nov 202510 Dec 2025Unknown
CVE-2025-58034FortinetFortiWebFortinet FortiWeb OS Command Injection Vulnerability18 Nov 202525 Nov 2025Unknown
CVE-2025-64446FortinetFortiWebFortinet FortiWeb Path Traversal Vulnerability14 Nov 202521 Nov 2025Unknown
CVE-2025-12480GladinetTriofoxGladinet Triofox Improper Access Control Vulnerability12 Nov 20253 Dec 2025Unknown
CVE-2025-62215MicrosoftWindowsMicrosoft Windows Race Condition Vulnerability12 Nov 20253 Dec 2025Unknown
CVE-2025-9242WatchGuardFireboxWatchGuard Firebox Out-of-Bounds Write Vulnerability12 Nov 20253 Dec 2025Unknown
CVE-2025-21042SamsungMobile DevicesSamsung Mobile Devices Out-of-Bounds Write Vulnerability10 Nov 20251 Dec 2025Unknown
CVE-2025-11371GladinetCentreStack and TriofoxGladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability4 Nov 202525 Nov 2025Unknown
CVE-2025-48703CWPControl Web PanelCWP Control Web Panel OS Command Injection Vulnerability4 Nov 202525 Nov 2025Unknown
CVE-2025-24893XWikiPlatformXWiki Platform Eval Injection Vulnerability30 Oct 202520 Nov 2025Unknown
CVE-2025-41244BroadcomVMware Aria Operations and VMware ToolsBroadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability30 Oct 202520 Nov 2025Unknown
CVE-2025-6204Dassault SystèmesDELMIA AprisoDassault Systèmes DELMIA Apriso Code Injection Vulnerability28 Oct 202518 Nov 2025Unknown
CVE-2025-6205Dassault SystèmesDELMIA AprisoDassault Systèmes DELMIA Apriso Missing Authorization Vulnerability28 Oct 202518 Nov 2025Unknown
CVE-2025-54236AdobeCommerce and MagentoAdobe Commerce and Magento Improper Input Validation Vulnerability24 Oct 202514 Nov 2025Unknown
CVE-2025-59287MicrosoftWindowsMicrosoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability24 Oct 202514 Nov 2025Unknown
CVE-2025-61932MotexLANSCOPE Endpoint ManagerMotex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability22 Oct 202512 Nov 2025Unknown
CVE-2022-48503AppleMultiple ProductsApple Multiple Products Unspecified Vulnerability20 Oct 202510 Nov 2025Unknown
CVE-2025-2746KenticoXperience CMSKentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability20 Oct 202510 Nov 2025Unknown
CVE-2025-2747KenticoXperience CMSKentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability20 Oct 202510 Nov 2025Unknown
CVE-2025-33073MicrosoftWindowsMicrosoft Windows SMB Client Improper Access Control Vulnerability20 Oct 202510 Nov 2025Unknown
CVE-2025-61884OracleE-Business SuiteOracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability20 Oct 202510 Nov 2025Known
CVE-2025-54253AdobeExperience Manager (AEM) FormsAdobe Experience Manager Forms Code Execution Vulnerability15 Oct 20255 Nov 2025Unknown
CVE-2016-7836SKYSEAClient ViewSKYSEA Client View Improper Authentication Vulnerability14 Oct 20254 Nov 2025Unknown
CVE-2025-24990MicrosoftWindowsMicrosoft Windows Untrusted Pointer Dereference Vulnerability14 Oct 20254 Nov 2025Unknown
CVE-2025-47827IGELIGEL OSIGEL OS Use of a Key Past its Expiration Date Vulnerability14 Oct 20254 Nov 2025Unknown
CVE-2025-59230MicrosoftWindowsMicrosoft Windows Improper Access Control Vulnerability14 Oct 20254 Nov 2025Unknown
CVE-2021-43798Grafana LabsGrafanaGrafana Path Traversal Vulnerability9 Oct 202530 Oct 2025Unknown
CVE-2025-27915SynacorZimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability7 Oct 202528 Oct 2025Unknown
CVE-2010-3765MozillaMultiple ProductsMozilla Multiple Products Remote Code Execution Vulnerability6 Oct 202527 Oct 2025Unknown
CVE-2010-3962MicrosoftInternet ExplorerMicrosoft Internet Explorer Uninitialized Memory Corruption Vulnerability6 Oct 202527 Oct 2025Unknown
CVE-2011-3402MicrosoftWindowsMicrosoft Windows Remote Code Execution Vulnerability6 Oct 202527 Oct 2025Unknown
CVE-2013-3918MicrosoftWindowsMicrosoft Windows Out-of-Bounds Write Vulnerability6 Oct 202527 Oct 2025Unknown
CVE-2021-22555LinuxKernelLinux Kernel Heap Out-of-Bounds Write Vulnerability6 Oct 202527 Oct 2025Unknown
CVE-2021-43226MicrosoftWindowsMicrosoft Windows Privilege Escalation Vulnerability6 Oct 202527 Oct 2025Known
CVE-2025-61882OracleE-Business SuiteOracle E-Business Suite Unspecified Vulnerability6 Oct 202527 Oct 2025Known
CVE-2014-6278GNUGNU BashGNU Bash OS Command Injection Vulnerability2 Oct 202523 Oct 2025Unknown
CVE-2015-7755JuniperScreenOSJuniper ScreenOS Improper Authentication Vulnerability2 Oct 202523 Oct 2025Unknown
CVE-2017-1000353JenkinsJenkinsJenkins Remote Code Execution Vulnerability2 Oct 202523 Oct 2025Unknown
CVE-2025-21043SamsungMobile DevicesSamsung Mobile Devices Out-of-Bounds Write Vulnerability2 Oct 202523 Oct 2025Unknown
CVE-2025-4008SmartbeddedMeteobridgeSmartbedded Meteobridge Command Injection Vulnerability2 Oct 202523 Oct 2025Unknown
CVE-2021-21311AdminerAdminerAdminer Server-Side Request Forgery Vulnerability29 Sep 202520 Oct 2025Unknown
CVE-2025-10035FortraGoAnywhere MFTFortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability29 Sep 202520 Oct 2025Known
CVE-2025-20352CiscoIOS and IOS XECisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability29 Sep 202520 Oct 2025Unknown
CVE-2025-32463SudoSudoSudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability29 Sep 202520 Oct 2025Unknown
CVE-2025-59689LibraesvaEmail Security GatewayLibraesva Email Security Gateway Command Injection Vulnerability29 Sep 202520 Oct 2025Unknown
CVE-2025-20333CiscoSecure Firewall Adaptive Security Appliance and Secure Firewall Threat DefenseCisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability25 Sep 202526 Sep 2025Unknown
CVE-2025-20362CiscoSecure Firewall Adaptive Security Appliance and Secure Firewall Threat DefenseCisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability25 Sep 202526 Sep 2025Unknown
CVE-2025-10585GoogleChromium V8Google Chromium V8 Type Confusion Vulnerability23 Sep 202514 Oct 2025Unknown
CVE-2025-5086Dassault SystèmesDELMIA AprisoDassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability11 Sep 20252 Oct 2025Unknown
CVE-2025-38352LinuxKernelLinux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability4 Sep 202525 Sep 2025Unknown
CVE-2025-48543AndroidRuntimeAndroid Runtime Use-After-Free Vulnerability4 Sep 202525 Sep 2025Unknown
CVE-2025-53690SitecoreMultiple ProductsSitecore Multiple Products Deserialization of Untrusted Data Vulnerability4 Sep 202525 Sep 2025Unknown
CVE-2023-50224TP-LinkTL-WR841NTP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability3 Sep 202524 Sep 2025Unknown
CVE-2025-9377TP-LinkMultiple RoutersTP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability3 Sep 202524 Sep 2025Unknown
CVE-2020-24363TP-LinkTL-WA855RETP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability2 Sep 202523 Sep 2025Unknown
CVE-2025-55177Meta PlatformsWhatsAppMeta Platforms WhatsApp Incorrect Authorization Vulnerability2 Sep 202523 Sep 2025Unknown
CVE-2025-57819SangomaFreePBXSangoma FreePBX Authentication Bypass Vulnerability29 Aug 202519 Sep 2025Unknown
CVE-2025-7775CitrixNetScalerCitrix NetScaler Memory Overflow Vulnerability26 Aug 202528 Aug 2025Unknown
CVE-2024-8068CitrixSession RecordingCitrix Session Recording Improper Privilege Management Vulnerability25 Aug 202515 Sep 2025Unknown
CVE-2024-8069CitrixSession RecordingCitrix Session Recording Deserialization of Untrusted Data Vulnerability25 Aug 202515 Sep 2025Unknown
CVE-2025-48384GitGitGit Link Following Vulnerability25 Aug 202515 Sep 2025Unknown
CVE-2025-43300AppleiOS, iPadOS, and macOSApple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability21 Aug 202511 Sep 2025Unknown
CVE-2025-54948Trend MicroApex OneTrend Micro Apex One OS Command Injection Vulnerability18 Aug 20258 Sep 2025Unknown
CVE-2025-8875N-ableN-CentralN-able N-Central Insecure Deserialization Vulnerability13 Aug 202520 Aug 2025Unknown
CVE-2025-8876N-ableN-CentralN-able N-Central Command Injection Vulnerability13 Aug 202520 Aug 2025Unknown
CVE-2007-0671MicrosoftOfficeMicrosoft Office Excel Remote Code Execution Vulnerability12 Aug 20252 Sep 2025Unknown
CVE-2013-3893MicrosoftInternet ExplorerMicrosoft Internet Explorer Resource Management Errors Vulnerability12 Aug 20252 Sep 2025Unknown
CVE-2025-8088RARLABWinRARRARLAB WinRAR Path Traversal Vulnerability12 Aug 20252 Sep 2025Known
CVE-2020-25078D-LinkDCS-2530L and DCS-2670L DevicesD-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability5 Aug 202526 Aug 2025Unknown
CVE-2020-25079D-LinkDCS-2530L and DCS-2670L DevicesD-Link DCS-2530L and DCS-2670L Command Injection Vulnerability5 Aug 202526 Aug 2025Unknown
CVE-2022-40799D-LinkDNR-322LD-Link DNR-322L Download of Code Without Integrity Check Vulnerability5 Aug 202526 Aug 2025Unknown
CVE-2023-2533PaperCutNG/MFPaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability28 Jul 202518 Aug 2025Unknown
CVE-2025-20281CiscoIdentity Services EngineCisco Identity Services Engine Injection Vulnerability28 Jul 202518 Aug 2025Unknown
CVE-2025-20337CiscoIdentity Services EngineCisco Identity Services Engine Injection Vulnerability28 Jul 202518 Aug 2025Unknown
CVE-2025-2775SysAidSysAid On-PremSysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability22 Jul 202512 Aug 2025Unknown
CVE-2025-2776SysAidSysAid On-PremSysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability22 Jul 202512 Aug 2025Unknown
CVE-2025-49704MicrosoftSharePointMicrosoft SharePoint Code Injection Vulnerability22 Jul 202523 Jul 2025Known
CVE-2025-49706MicrosoftSharePointMicrosoft SharePoint Improper Authentication Vulnerability22 Jul 202523 Jul 2025Known
CVE-2025-54309CrushFTPCrushFTPCrushFTP Unprotected Alternate Channel Vulnerability22 Jul 202512 Aug 2025Unknown
CVE-2025-6558GoogleChromiumGoogle Chromium ANGLE and GPU Improper Input Validation Vulnerability22 Jul 202512 Aug 2025Unknown
CVE-2025-53770MicrosoftSharePointMicrosoft SharePoint Deserialization of Untrusted Data Vulnerability20 Jul 202521 Jul 2025Known