Added to KEV in 2025-12

CVE-2025-14847 – MongoDB MongoDB and MongoDB Server (added 2025-12-29)
CVE-2023-52163 – Digiever DS-2105 Pro (added 2025-12-22)
CVE-2025-14733 – WatchGuard Firebox (added 2025-12-19)
CVE-2025-59374 – ASUS Live Update (added 2025-12-17)
CVE-2025-40602 – SonicWall SMA1000 appliance (added 2025-12-17)
CVE-2025-20393 – Cisco Multiple Products (added 2025-12-17)
CVE-2025-59718 – Fortinet Multiple Products (added 2025-12-16)
CVE-2025-43529 – Apple Multiple Products (added 2025-12-15)
CVE-2025-14611 – Gladinet CentreStack and Triofox (added 2025-12-15)
CVE-2025-14174 – Google Chromium (added 2025-12-12)
CVE-2018-4063 – Sierra Wireless AirLink ALEOS (added 2025-12-12)
CVE-2025-58360 – OSGeo GeoServer (added 2025-12-11)
CVE-2025-62221 – Microsoft Windows (added 2025-12-09)
CVE-2025-6218 – RARLAB WinRAR (added 2025-12-09)
CVE-2025-66644 – Array Networks ArrayOS AG (added 2025-12-08)
CVE-2022-37055 – D-Link Routers (added 2025-12-08)
CVE-2025-55182 – Meta React Server Components (added 2025-12-05)
CVE-2021-26828 – OpenPLC ScadaBR (added 2025-12-03)
CVE-2025-48633 – Android Framework (added 2025-12-02)
CVE-2025-48572 – Android Framework (added 2025-12-02)

Get new KEV entries in your inbox: free n8n workflow. Free CISA KEV Patch Digest (n8n workflow) (Runbook Foundry). A Monday-morning email of KEV entries added in the previous week (Mon-Sun), with your watchlist vendors listed first.
Not affiliated with n8n GmbH or CISA. Not tested on n8n Cloud. n8n is a trademark of n8n GmbH.

Generated from the CISA feed with AI assistance; facts are taken verbatim from the feed. Not affiliated with or endorsed by CISA. Facts come from the CISA Known Exploited Vulnerabilities catalog (public domain).