Added to KEV in 2025-04

CVE-2025-31324 – SAP NetWeaver (added 2025-04-29)
CVE-2025-42599 – Qualitia Active! Mail (added 2025-04-28)
CVE-2025-3928 – Commvault Web Server (added 2025-04-28)
CVE-2025-1976 – Broadcom Brocade Fabric OS (added 2025-04-28)
CVE-2025-31201 – Apple Multiple Products (added 2025-04-17)
CVE-2025-31200 – Apple Multiple Products (added 2025-04-17)
CVE-2025-24054 – Microsoft Windows (added 2025-04-17)
CVE-2021-20035 – SonicWall SMA100 Appliances (added 2025-04-16)
CVE-2024-53197 – Linux Kernel (added 2025-04-09)
CVE-2024-53150 – Linux Kernel (added 2025-04-09)
CVE-2025-30406 – Gladinet CentreStack (added 2025-04-08)
CVE-2025-29824 – Microsoft Windows (added 2025-04-08)
CVE-2025-31161 – CrushFTP CrushFTP (added 2025-04-07)
CVE-2025-22457 – Ivanti Connect Secure, Policy Secure, and ZTA Gateways (added 2025-04-04)
CVE-2025-24813 – Apache Tomcat (added 2025-04-01)

Get new KEV entries in your inbox: free n8n workflow. Free CISA KEV Patch Digest (n8n workflow) (Runbook Foundry). A Monday-morning email of KEV entries added in the previous week (Mon-Sun), with your watchlist vendors listed first.
Not affiliated with n8n GmbH or CISA. Not tested on n8n Cloud. n8n is a trademark of n8n GmbH.

Generated from the CISA feed with AI assistance; facts are taken verbatim from the feed. Not affiliated with or endorsed by CISA. Facts come from the CISA Known Exploited Vulnerabilities catalog (public domain).