Added to KEV in 2025-05

CVE-2025-4632 – Samsung MagicINFO 9 Server (added 2025-05-22)
CVE-2025-4428 – Ivanti Endpoint Manager Mobile (EPMM) (added 2025-05-19)
CVE-2025-4427 – Ivanti Endpoint Manager Mobile (EPMM) (added 2025-05-19)
CVE-2025-27920 – Srimax Output Messenger (added 2025-05-19)
CVE-2024-27443 – Synacor Zimbra Collaboration Suite (ZCS) (added 2025-05-19)
CVE-2024-11182 – MDaemon Email Server (added 2025-05-19)
CVE-2023-38950 – ZKTeco BioTime (added 2025-05-19)
CVE-2025-42999 – SAP NetWeaver (added 2025-05-15)
CVE-2024-12987 – DrayTek Vigor Routers (added 2025-05-15)
CVE-2025-32756 – Fortinet Multiple Products (added 2025-05-14)
CVE-2025-32709 – Microsoft Windows (added 2025-05-13)
CVE-2025-32706 – Microsoft Windows (added 2025-05-13)
CVE-2025-32701 – Microsoft Windows (added 2025-05-13)
CVE-2025-30400 – Microsoft Windows (added 2025-05-13)
CVE-2025-30397 – Microsoft Windows (added 2025-05-13)
CVE-2025-47729 – TeleMessage TM SGNL (added 2025-05-12)
CVE-2024-6047 – GeoVision Multiple Devices (added 2025-05-07)
CVE-2024-11120 – GeoVision Multiple Devices (added 2025-05-07)
CVE-2025-27363 – FreeType FreeType (added 2025-05-06)
CVE-2025-3248 – Langflow Langflow (added 2025-05-05)
CVE-2025-34028 – Commvault Command Center (added 2025-05-02)
CVE-2024-58136 – Yiiframework Yii (added 2025-05-02)
CVE-2024-38475 – Apache HTTP Server (added 2025-05-01)
CVE-2023-44221 – SonicWall SMA100 Appliances (added 2025-05-01)

Get new KEV entries in your inbox: free n8n workflow. Free CISA KEV Patch Digest (n8n workflow) (Runbook Foundry). A Monday-morning email of KEV entries added in the previous week (Mon-Sun), with your watchlist vendors listed first.
Not affiliated with n8n GmbH or CISA. Not tested on n8n Cloud. n8n is a trademark of n8n GmbH.

Generated from the CISA feed with AI assistance; facts are taken verbatim from the feed. Not affiliated with or endorsed by CISA. Facts come from the CISA Known Exploited Vulnerabilities catalog (public domain).