Known exploited vulnerabilities are security flaws that trusted authorities or threat intelligence confirm are under active attack, and they matter because enterprises use them to prioritize remediation, demonstrate risk-based patching, and align with regulatory and governance expectations.
177 articles about Known Exploited Vulnerabilities
Decision Insights Threat Desk • November 25, 2025
CISA adds two Dassault Systèmes DELMIA Apriso vulnerabilities to Known Exploited Vulnerabilities Catalog for active exploitation.
Decision Insights Threat Desk • November 25, 2025
CISA adds two vulnerabilities affecting XWiki Platform and Broadcom VMware to its KEV Catalog, with federal agencies required to remediate them.
Decision Insights Threat Desk • November 25, 2025
CISA added CVE-2025-58034, a Fortinet FortiWeb OS command code injection vulnerability, to the Known Exploited Vulnerabilities Catalog with a one-week remediation guideline.
Decision Insights Threat Desk • November 25, 2025
CISA added CVE-2025-58034, a Fortinet FortiWeb OS command code injection vulnerability, to its Known Exploited Vulnerabilities Catalog. This vulnerability is actively exploited, with a recommended remediation timeframe of one week. Federal agencies are required to address such vulnerabilities under BOD 22-01.
Decision Insights Threat Desk • November 24, 2025
CISA added CVE-2025-21042, an out-of-bounds write flaw in Samsung mobile devices, to its Known Exploited Vulnerabilities catalog due to active exploitation.
Decision Insights Research • November 22, 2025
Weekly roundup covering a DARPA materials contract, Copilot data security controls, network-as-a-service, and industrial control advisories.
Decision Insights Threat Desk • November 21, 2025
CISA reported exploitation of CVE-2025-64446, a relative path traversal vulnerability in Fortinet FortiWeb versions between 7.0.0 and 8.0.1. The flaw allows unauthenticated actors to execute administrative commands via crafted HTTP(S) requests. Fortinet advises upgrading to specified fixed versions or disabling HTTP/HTTPS for external interfaces.
Decision Insights Threat Desk • November 21, 2025
Fortinet's FortiWeb versions have a relative path traversal flaw allowing unauthorized admin command execution via HTTP/HTTPS requests.
Decision Insights Threat Desk • November 21, 2025
CISA has added CVE-2025-61757 impacting Oracle Fusion Middleware to the Known Exploited Vulnerabilities Catalog.
Decision Insights Threat Desk • November 21, 2025
CISA adds CVE-2025-61757 affecting Oracle Fusion Middleware to Known Exploited Vulnerabilities Catalog following active exploits.
Decision Insights Threat Desk • November 21, 2025
CISA added CVE-2025-64446, a Fortinet FortiWeb path traversal vulnerability, to its Known Exploited Vulnerabilities Catalog due to active exploitation evidence. Federal agencies must remediate under BOD 22-01; CISA recommends all organizations prioritize mitigation of listed vulnerabilities in vulnerability management.
Decision Insights Threat Desk • November 21, 2025
CISA added CVE-2025-64446, a Fortinet FortiWeb path traversal vulnerability, to its vulnerability catalog after detecting active exploitation.