Added to KEV in 2025-07

CVE-2025-20337 – Cisco Identity Services Engine (added 2025-07-28)
CVE-2025-20281 – Cisco Identity Services Engine (added 2025-07-28)
CVE-2023-2533 – PaperCut NG/MF (added 2025-07-28)
CVE-2025-6558 – Google Chromium (added 2025-07-22)
CVE-2025-54309 – CrushFTP CrushFTP (added 2025-07-22)
CVE-2025-49706 – Microsoft SharePoint (added 2025-07-22)
CVE-2025-49704 – Microsoft SharePoint (added 2025-07-22)
CVE-2025-2776 – SysAid SysAid On-Prem (added 2025-07-22)
CVE-2025-2775 – SysAid SysAid On-Prem (added 2025-07-22)
CVE-2025-53770 – Microsoft SharePoint (added 2025-07-20)
CVE-2025-25257 – Fortinet FortiWeb (added 2025-07-18)
CVE-2025-47812 – Wing FTP Server Wing FTP Server (added 2025-07-14)
CVE-2025-5777 – Citrix NetScaler ADC and Gateway (added 2025-07-10)
CVE-2019-9621 – Synacor Zimbra Collaboration Suite (ZCS) (added 2025-07-07)
CVE-2019-5418 – Rails Ruby on Rails (added 2025-07-07)
CVE-2016-10033 – PHP PHPMailer (added 2025-07-07)
CVE-2014-3931 – Looking Glass Multi-Router Looking Glass (MRLG) (added 2025-07-07)
CVE-2025-6554 – Google Chromium V8 (added 2025-07-02)
CVE-2025-48928 – TeleMessage TM SGNL (added 2025-07-01)
CVE-2025-48927 – TeleMessage TM SGNL (added 2025-07-01)

Get new KEV entries in your inbox: free n8n workflow. Free CISA KEV Patch Digest (n8n workflow) (Runbook Foundry). A Monday-morning email of KEV entries added in the previous week (Mon-Sun), with your watchlist vendors listed first.
Not affiliated with n8n GmbH or CISA. Not tested on n8n Cloud. n8n is a trademark of n8n GmbH.

Generated from the CISA feed with AI assistance; facts are taken verbatim from the feed. Not affiliated with or endorsed by CISA. Facts come from the CISA Known Exploited Vulnerabilities catalog (public domain).