Exploited Vulnerabilities DailyVulnerabilities added to KEV in July 2025
Added20
Ransomware-linked4
Vendors14
By vendor
3
2
2
2
2
1
1
1
1
1
Nearby months
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2025-20337 | Cisco Identity Services Engine | 2025-07-28 | 67.9% | Unknown |
| CVE-2025-20281 | Cisco Identity Services Engine | 2025-07-28 | 97.6% | Unknown |
| CVE-2023-2533 | PaperCut NG/MF | 2025-07-28 | 28.6% | Unknown |
| CVE-2025-6558 | Google Chromium | 2025-07-22 | 9.4% | Unknown |
| CVE-2025-54309 | CrushFTP CrushFTP | 2025-07-22 | 95.1% | Unknown |
| CVE-2025-49706 | Microsoft SharePoint | 2025-07-22 | 99.0% | Known |
| CVE-2025-49704 | Microsoft SharePoint | 2025-07-22 | 99.9% | Known |
| CVE-2025-2776 | SysAid SysAid On-Prem | 2025-07-22 | 64.7% | Unknown |
| CVE-2025-2775 | SysAid SysAid On-Prem | 2025-07-22 | 42.6% | Unknown |
| CVE-2025-53770 | Microsoft SharePoint | 2025-07-20 | 99.9% | Known |
| CVE-2025-25257 | Fortinet FortiWeb | 2025-07-18 | 99.8% | Unknown |
| CVE-2025-47812 | Wing FTP Server Wing FTP Server | 2025-07-14 | 93.2% | Unknown |
| CVE-2025-5777 | Citrix NetScaler ADC and Gateway | 2025-07-10 | 99.9% | Known |
| CVE-2019-9621 | Synacor Zimbra Collaboration Suite (ZCS) | 2025-07-07 | 81.0% | Unknown |
| CVE-2019-5418 | Rails Ruby on Rails | 2025-07-07 | 98.5% | Unknown |
| CVE-2016-10033 | PHP PHPMailer | 2025-07-07 | 99.7% | Unknown |
| CVE-2014-3931 | Looking Glass Multi-Router Looking Glass (MRLG) | 2025-07-07 | 28.9% | Unknown |
| CVE-2025-6554 | Google Chromium V8 | 2025-07-02 | 14.1% | Unknown |
| CVE-2025-48928 | TeleMessage TM SGNL | 2025-07-01 | 0.5% | Unknown |
| CVE-2025-48927 | TeleMessage TM SGNL | 2025-07-01 | 11.1% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.