Common Vulnerabilities and Exposures is a standardized, publicly available list of disclosed cybersecurity vulnerabilities and exposures, using unique identifiers that let enterprises coordinate vulnerability management, security tooling, compliance activities, and risk reporting across diverse systems, vendors, and regulatory or audit requirements.
December 5, 2025
CISA added CVE-2025-55182, a remote code execution flaw in Meta React Server Components, to its Known Exploited Vulnerabilities Catalog.
December 4, 2025
CISA reported an FCEB agency breach via a known GeoServer vulnerability and urged verification of defenses.
December 3, 2025
CISA added CVE-2021-26828 (OpenPLC ScadaBR unrestricted file upload) to its Known Exploited Vulnerabilities Catalog.
December 3, 2025
CISA added CVE-2021-26828 (OpenPLC ScadaBR unrestricted file upload) to its Known Exploited Vulnerabilities Catalog.
December 2, 2025
CISA added two Android Framework vulnerabilities to the Known Exploited Vulnerabilities Catalog after evidence of active exploitation.
December 2, 2025
CISA added CVE-2025-48572 and CVE-2025-48633, Android Framework vulnerabilities, to its Known Exploited Vulnerabilities Catalog.