Exploited Vulnerabilities DailyVulnerabilities added to KEV in September 2025
Added16
Ransomware-linked1
Vendors12
By vendor
3
3
1
1
1
1
1
1
1
1
Nearby months
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2025-59689 | Libraesva Email Security Gateway | 2025-09-29 | 1.8% | Unknown |
| CVE-2025-32463 | Sudo Sudo | 2025-09-29 | 55.4% | Unknown |
| CVE-2025-20352 | Cisco IOS and IOS XE | 2025-09-29 | 39.4% | Unknown |
| CVE-2025-10035 | Fortra GoAnywhere MFT | 2025-09-29 | 99.7% | Known |
| CVE-2021-21311 | Adminer Adminer | 2025-09-29 | 98.4% | Unknown |
| CVE-2025-20362 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | 2025-09-25 | 87.0% | Unknown |
| CVE-2025-20333 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | 2025-09-25 | 70.6% | Unknown |
| CVE-2025-10585 | Google Chromium V8 | 2025-09-23 | 5.3% | Unknown |
| CVE-2025-5086 | Dassault Systèmes DELMIA Apriso | 2025-09-11 | 96.9% | Unknown |
| CVE-2025-53690 | Sitecore Multiple Products | 2025-09-04 | 51.0% | Unknown |
| CVE-2025-48543 | Android Runtime | 2025-09-04 | 0.5% | Unknown |
| CVE-2025-38352 | Linux Kernel | 2025-09-04 | 1.2% | Unknown |
| CVE-2025-9377 | TP-Link Multiple Routers | 2025-09-03 | 35.8% | Unknown |
| CVE-2023-50224 | TP-Link TL-WR841N | 2025-09-03 | 15.5% | Unknown |
| CVE-2025-55177 | Meta Platforms WhatsApp | 2025-09-02 | 4.7% | Unknown |
| CVE-2020-24363 | TP-Link TL-WA855RE | 2025-09-02 | 20.6% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.